From c58d8f1be7bcec566e55febb580db6ebf357a06f Mon Sep 17 00:00:00 2001
From: Alan Davis <alan.davis@alfresco.com>
Date: Mon, 5 Oct 2020 23:38:47 +0100
Subject: [PATCH] From alfresco-core (included json change after 7.0.0-A7)

Bump commons-io from 2.7 to 2.8.0 (#160)

(cherry picked from commit c5a8f5ffb3988bd87719aa43b7089851607b7308)
MNT-21879 : [Security] Multiple json-java vulnerabilities
   - updated org.json.json version

(cherry picked from commit edaffa350b29157bdcd1de3737fa491b88093378)
[revert] MNT-21879 : [Security] Multiple json-java vulnerabilities
   - updated org.json.json version

(cherry picked from commit 48e2cffb287adb5c5a1d5092ae7fde895c8d0836)
---
 pom.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index de3ba6c6ae..79b006f3d7 100644
--- a/pom.xml
+++ b/pom.xml
@@ -66,10 +66,10 @@
         <dependency.webscripts.version>8.8</dependency.webscripts.version>
         <dependency.bouncycastle.version>1.66</dependency.bouncycastle.version>
         <dependency.mockito-core.version>3.5.11</dependency.mockito-core.version>
-        <dependency.org-json.version>20090211</dependency.org-json.version>
+        <dependency.org-json.version>20160212</dependency.org-json.version>
         <dependency.commons-dbcp.version>1.4-DBCP330</dependency.commons-dbcp.version>
         <dependency.guava.version>28.2-jre</dependency.guava.version>
-        <dependency.commons-io.version>2.7</dependency.commons-io.version>
+        <dependency.commons-io.version>2.8.0</dependency.commons-io.version>
         <dependency.gson.version>2.8.5</dependency.gson.version>
         <dependency.httpclient.version>4.5.12</dependency.httpclient.version>
         <dependency.httpcore.version>4.4.13</dependency.httpcore.version>