There is a vulnerability in Commons IO 2.6,upgrade recommended

[QiAnXinCodeSafe]

https://github.com/google/data-transfer-project/blob/ef53a7e92ef77a3efe0bdc378262215d0fe7498d/extensions/data-transfer/portability-data-transfer-facebook/build.gradle#L28

CVE-2021-29425

Recommended upgrade version：2.7

[meeraj257]

I am working on this issue

[meeraj257]

@QiAnXinCodeSafe - who can help me here? I have raised the commit and my email address has been added to my corporate google group. The commit shows the email address added. The CLA check is still failing

[lisad]

The pull request to fix this was closed, and the version of Commons-IO is still 2.6. (https://github.com/dtinit/data-transfer-project/blob/master/extensions/data-transfer/portability-data-transfer-facebook/build.gradle)