From 71b31daed3bd95e8212a7c780ee1d11efd252365 Mon Sep 17 00:00:00 2001
From: Shahim Sharafudeen <shahim.ayathil@gmail.com>
Date: Mon, 2 Jun 2025 18:56:42 +0530
Subject: [PATCH] Fix vulnerability issue in commons-beanutils to address
 CVE-2025-48734

---
 pom.xml                      | 2 +-
 presto-product-tests/pom.xml | 6 ++++++
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index d664979546369..4fc4ec485e5c4 100644
--- a/pom.xml
+++ b/pom.xml
@@ -223,7 +223,7 @@
             <dependency>
                 <groupId>commons-beanutils</groupId>
                 <artifactId>commons-beanutils</artifactId>
-                <version>1.9.4</version>
+                <version>1.11.0</version>
             </dependency>
 
             <dependency>
diff --git a/presto-product-tests/pom.xml b/presto-product-tests/pom.xml
index 37091d2769f3f..92d107619fae2 100644
--- a/presto-product-tests/pom.xml
+++ b/presto-product-tests/pom.xml
@@ -31,6 +31,12 @@
                 <artifactId>commons-cli</artifactId>
                 <version>1.4</version>
             </dependency>
+            <!-- commons-validator and commons-beanutils rely on different versions. Pull up to the highest one -->
+            <dependency>
+                <groupId>commons-logging</groupId>
+                <artifactId>commons-logging</artifactId>
+                <version>1.3.5</version>
+            </dependency>
         </dependencies>
     </dependencyManagement>