From af280e10acf7c994ff70749491a6cc7c59027896 Mon Sep 17 00:00:00 2001
From: endor-matt <matt@endor.ai>
Date: Sat, 13 Jun 2026 00:48:21 -0400
Subject: [PATCH] =?UTF-8?q?fix(deps):=20upgrade=20commons-fileupload=201.3?=
 =?UTF-8?q?.1=20=E2=86=92=201.6.0=20to=20remediate=206=20CVEs?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Endor Labs VersionUpgrade evidence (UUID 69f189526c5125ce901fd7c3):
- upgrade_risk: low, CIA: no breaking changes, findings_fixed: 6, findings_introduced: 0
- Fixes GHSA-7x9j-7223-rg5m (Critical), GHSA-fvm3-cfvj-gxqq (High),
  GHSA-hfrx-6qgj-fp6c (High), GHSA-vv7r-c36w-3prj (High),
  GHSA-78wr-2p64-hpwj (High, commons-io), GHSA-gwrp-pvrq-jmwv (Medium)
- Application source uses Spring MultipartFile abstraction only; no direct
  commons-fileupload API calls found in src/

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 5842bbd..b83dd91 100644
--- a/pom.xml
+++ b/pom.xml
@@ -121,7 +121,7 @@
 	        <dependency>
 		    <groupId>commons-fileupload</groupId>
 		    <artifactId>commons-fileupload</artifactId>
-		    <version>1.3.1</version>
+		    <version>1.6.0</version>
 		</dependency>
 		 <!-- Memcached Dependency -->
 		<dependency>