Skip to content

Lift 2.6.3: Security Release
Compare
Choose a tag to compare
@Shadowfiend Shadowfiend released this 31 Jan 23:09
2.6.3-release
59f4b46

Lift 2.6 was found to be using an outdated version of Apache Commons
FileUpload, which had an unpatched DoS vulnerability.

Lift 2.6.3 bumps the dependency to the latest version, 1.3.1, which fixes
this vulnerability. Additionally, if you're using sbt, you can directly depend
on commons-fileupload 1.3.1 to evict the Lift dependency. The versions
are compatible with respect to Lift's usage.

Assets 2
Loading