https://blogs.apache.org/foundation/entry/apache_commons_statement_to_widespread https://blogs.apache.org/foundation/entry/apache_commons_sta... "So replacing

https://blogs.apache.org/foundation/entry/apache_commons_statement_to_widespread https://blogs.apache.org/foundation/entry/apache_commons_sta... "So replacing your installations with a hardened version of Apache Commons Collections will not make your application resist this vulnerability."