Remove PropertyDescriptor with name class from PropertyUtils.getPropertyDescriptors results since access to class method is blocked.
PropertyUtils.getPropertyDescriptor blocks access to PropertyDescriptor with name class.

February 2025

Released on Feb 14, 2025

Full Version:

1.7.0-commons-beanutils-1.7.1

This release originates from the open‑source BeanUtils project forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds.
This package is a dependency for Apache Struts 1. Upgrading to 1.9.4 is recommended but for projects that can't upgrade, this release is available.

This release patches the following:

CVE-2014-0114: Class Loader manipulation.
CVE-2019-10086: Sets the default behavior to block access to the classloader via the class property available on all Java objects.
groupId: commons-beanutils
artifactId: commons-beanutils

~/herodevs-spring-framework-support

Open Source Support

When official support ends, we're just getting started.

New releases published regularly — check back often for the latest security updates

$ cat features.txt