[jart]

Why did no one tell Apache?

[gebl]

https://blogs.apache.org/foundation/entry/apache_commons_sta...

"So replacing your installations with a hardened version of Apache Commons Collections will not make your application resist this vulnerability."

[jart]

Ok well you can tell your cohort that this narrative isn't going to fly anymore.

[gebl]

What evs