https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48924 Fixed if we use org.apache.commons:commons-lang3@3.18.0