Hi Scott, came here looking for this exact ticket because of the CVE vulnerability lighting up in my IDE. Just a hint, the last code changes in beanutils were just 3 days ago. Maybe it is possible to message the maintainer Gary Gregory about a release? :) The master was already switched to commons-collections4 back in September 2023.