CVE-2024-47554 reported against commons-io shaded in velocity
release 13.15
CVE-2025-27553 - Relative Path Traversal vulnerability in Apache Commons VFS before 2.10.0
release 13.15
yajsw-stable-13.15 released
update MANIFEST.MF
update commons-vfs2-2.10.0, velocity-engine-core-2.4.1
thanks, it is now clear what is going on. in your configuration you are using the keystore to set secret data on the command line of the process. this is not the intended usage. rational: anyone with access to the command line of a process or to the service installation (service file on linux, windows registry or services ui) is able to read the secret at any time. in my opinion, this is no better than setting it in the config file and evntl limiting the read rights to this file. the idea was to...