From 227f7884971dd5068463f6394c5e8dca98b382aa Mon Sep 17 00:00:00 2001
From: David Estes <davydotcom@gmail.com>
Date: Wed, 18 Dec 2019 16:50:21 -0500
Subject: [PATCH] Bump commons-beanutils due to CVE CVE-2019-10086

---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 0191d7cf..5e63d3b0 100644
--- a/pom.xml
+++ b/pom.xml
@@ -58,7 +58,7 @@ Less4j is a port. The original compiler was written in JavaScript and is called
 		<dependency>
 			<groupId>commons-beanutils</groupId>
 			<artifactId>commons-beanutils</artifactId>
-			<version>1.8.3</version>
+			<version>1.9.4</version>
 		</dependency>
 		<dependency>
 			<groupId>com.beust</groupId>