Jasper report is having compatibility with latest POI 5.0.0

Same here. Need to update poi due to security issues inside the dependent commons-compress.

POI updated the dependency in 5.0.0, so there it would be fixed, but can't upgrade due to that compatibility issue!

Please update your dependency to POI too!

The CVE's are:

CVE-2021-35515, CVE-2021-35516, CVE-2021-35517, CVE-2021-36090

 

Changed Resolution from Open to Fixed

Changed Status from New to Resolved

---

POI has been upgraded to 5.1.0 at https://github.com/TIBCOSoftware/jasperreports/commit/390d385d9867b1deb1f8afedbaa2d2613e6d4e6fRegards,Lucian