How to use httpclient 4.x

[Nikhilkarande33]

Hi Team ,

i am working on project where we are using spring-security-saml2-core 1.0.10.RELEASE library and this library having not-going-to-be-commons-ssl 0.3.20 as compile dependency.

Now not-going-to-be-commons-ssl 0.3.20 is using commons-httpclient 3.1 which is vulnerable library so i want to upgrade to
httpclient 4.x

https://mvnrepository.com/artifact/commons-httpclient/commons-httpclient

Refer to above url, it mentioned that commons-httpclient artifacts was moved to httpclient 4.x

how i can make use of httpclient in spring-security-saml2-core along with not-going-to-be-commons-ssl, could anyone suggest me.

[UcanInfosec]

To do this, one would need to edit the pom.xml to reflect the change of:
commons-httpclient
commons-httpclient
3.1

To:
org.apache.httpcomponents
httpclient
4.5.13

I have made the applicable change in #13, which we can test and get approved