Hi, there! We are a research team working on third-party library analysis. We have found that some widely-used third-party libraries in your project have major/critical bugs, which will degrade the quality of your project. We highly recommend you to update those libraries to new versions. We have attached the buggy third-party libraries and corresponding jira issue links below for you to have more detailed information. 1. commons-lang commons-lang version: 2.4 Jira issues: Fix case-insensitive string handling affectsVersions:2.4 https://issues.apache.org/jira/projects/LANG/issues/LANG-432?filter=allopenissues StringEscapeUtils.escapeHTML() does not escape chars (0x00-0x20) affectsVersions:2.4 https://issues.apache.org/jira/projects/LANG/issues/LANG-439?filter=allopenissues DateUtils.round doesn't work correct for Calendar.AM_PM affectsVersions:2.4 https://issues.apache.org/jira/projects/LANG/issues/LANG-440?filter=allopenissues Lower Ascii Characters don't get encoded by Entities.java affectsVersions:2.4 https://issues.apache.org/jira/projects/LANG/issues/LANG-448?filter=allopenissues Issue in HashCodeBuilder which only shows up under high load multi-threaded usage. affectsVersions:2.4 https://issues.apache.org/jira/projects/LANG/issues/LANG-459?filter=allopenissues Ant build file does not include ReflectTestSuite affectsVersions:2.4 https://issues.apache.org/jira/projects/LANG/issues/LANG-463?filter=allopenissues EqualsBuilder and HashCodeBuilder treat java.math.BigDecimal inconsistantly and break general contract of hashCode affectsVersions:2.4 https://issues.apache.org/jira/projects/LANG/issues/LANG-467?filter=allopenissues JDK 1.5 build/runtime failure on LANG-393 (EqualsBuilder) affectsVersions:2.4 https://issues.apache.org/jira/projects/LANG/issues/LANG-468?filter=allopenissues ExtendedMessageFormat: OutOfMemory with custom format registry and a pattern containing single quotes affectsVersions:2.4 https://issues.apache.org/jira/projects/LANG/issues/LANG-477?filter=allopenissues parseDate cannot parse ISO8601 dates produced by FastDateFormat affectsVersions:2.4 https://issues.apache.org/jira/projects/LANG/issues/LANG-530?filter=allopenissues DateFormatUtils.format does not correctly change Calendar TimeZone in certain situations affectsVersions:2.4 https://issues.apache.org/jira/projects/LANG/issues/LANG-538?filter=allopenissues StringUtils replaceEach - Bug or Missing Documentation affectsVersions:2.4 https://issues.apache.org/jira/projects/LANG/issues/LANG-552?filter=allopenissues Javadoc wrong for StringUtils startsWith; startsWithIgnoreCase; endsWith and endsWithIgnoreCase affectsVersions:2.4 https://issues.apache.org/jira/projects/LANG/issues/LANG-557?filter=allopenissues HashCodeBuilder reflectionAppend creates unnecessary copy of excludeFields affectsVersions:2.4 https://issues.apache.org/jira/projects/LANG/issues/LANG-575?filter=allopenissues ExceptionUtils uses mutable lock target affectsVersions:2.4 https://issues.apache.org/jira/projects/LANG/issues/LANG-584?filter=allopenissues ClassUtils.toClass(Object[]) throws NPE on null array element affectsVersions:2.4 https://issues.apache.org/jira/projects/LANG/issues/LANG-587?filter=allopenissues   Sincerely~ FDU Software Engineering Lab Feb 15th, 2019