依赖包中有漏洞

[PittyXu]

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.
This issue affects Apache Commons Compress: from 1.3 through 1.25.0. 
Users are recommended to upgrade to version 1.26.0 which fixes the issue.

maven:commons-beanutils:commons-beanutils:1.9.4
    maven:commons-collections:commons-collections:3.2.2

The framework Apache Commons Collections before 4.3 is vulnerable to Stack Overflow. 
The function `add()` in the file `src/main/java/org/apache/commons/collections4/list/SetUniqueList.java` throws a StackOverflowError when the `add()` method is called with its own list. 
To resolve this issue - upgrade to version 4.3. 
Please note: the package name was changed to org.apache.commons:commons-collections4 on version 4.0.