René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Security Vulnerabilities in usb4java 1.3.0 - CVE-2025-48924 and CVE-2020-15250","articleBody":"**Environment:**\n - OS: yocto linux dunfell\n - Java version 1.8\n - usb4java version 1.3.0\n\n**Bug description**\nWe are using `usb4java` version 1.3.0 in our project and noticed that it includes dependencies with known vulnerabilities:\n\n- **CVE-2025-48924**: Uncontrolled recursion in Apache Commons Lang (fixed in commons-lang3 3.18.0)\n- **CVE-2020-15250**: Information disclosure in JUnit TemporaryFolder (fixed in JUnit 4.13.1)\n\nCould you please confirm:\n- Whether these vulnerabilities impact usb4java usage directly?\n- Any recommended mitigation steps?\n- If there is a plan for a new release that updates these dependencies?\n\n\n**Reproduction**\nVulnerabilities from dependencies: CVE-2025-48924CVE-2020-15250\nReference link: https://mvnrepository.com/artifact/org.usb4java/usb4java/1.3.0\n\n\n**Expected behavior**\nReported Vulnerabilities to be solved. ","author":{"url":"https://github.com/sharath2mobile","@type":"Person","name":"sharath2mobile"},"datePublished":"2025-08-20T06:03:54.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1},"url":"https://github.com/92/usb4java/issues/92"}