Following on from closed issue #616
@joeferner - the node-java library is still flagged as having a transient vulnerability due to dependency on commons-lang3 3.5.0.
commons-lang3 3.19.0 was released 3 weeks ago and includes your suggested changes. Will you be able to take this into node-java?
apache/commons-lang@5dd8e33