From 8f1a120bf126ae017dcba5247bd5093059572f9b Mon Sep 17 00:00:00 2001
From: Slawomir Jaranowski <s.jaranowski@gmail.com>
Date: Sun, 12 Oct 2025 12:08:21 +0200
Subject: [PATCH] Override version of commons-lang3 to avoid reporting of
 security issues

---
 pom.xml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/pom.xml b/pom.xml
index 4e9ae43..5b2b9bb 100644
--- a/pom.xml
+++ b/pom.xml
@@ -54,6 +54,14 @@ limitations under the License.
   </properties>
 
   <dependencies>
+    <dependency>
+      <groupId>org.apache.commons</groupId>
+      <artifactId>commons-lang3</artifactId>
+      <!-- override version to avoid CVE-2025-48924 -->
+      <!-- can be removed when velocity upgrades its commons-lang3 dependency -->
+      <version>3.19.0</version>
+    </dependency>
+
     <dependency>
       <groupId>org.apache.velocity</groupId>
       <artifactId>velocity-engine-core</artifactId>