Security Vulnerability Fixes Applied:

CVE-2025-5889 (brace-expansion): Fixed by updating to version 4.0.1
  - CVSS Score: 1.3 (LOW)
  - Affected: 2.0.0 <= version <= 2.0.1
  - Fixed: Updated to 4.0.1 (well beyond minimum fix of 2.0.2)
  - Impact: Uncontrolled Resource Consumption

CVE-2024-12798, CVE-2024-12801, CVE-2025-48924 (Logback): Fixed by updating to version 1.5.18
  - Impact: Various security vulnerabilities in logging framework

Bouncy Castle Security Fix: Updated from 1.78 to 1.79
  - bcprov-jdk18on: https://repo1.maven.org/maven2/org/bouncycastle/bcprov-jdk18on/1.79/bcprov-jdk18on-1.79.jar
  - bcpg-jdk18on: https://repo1.maven.org/maven2/org/bouncycastle/bcpg-jdk18on/1.79/bcpg-jdk18on-1.79.jar
  - CVSS Score: Medium Severity
  - Impact: Allocation of Resources Without Limits or Throttling
  - Fixed: Prevents excessive resource allocation from crafted ASN.1 objects

Commons-lang3: Updated to 3.18.0 for security fixes
SLF4J: Updated to 2.0.16 for compatibility with Logback 1.5.18

Package build date: Sat Aug 23 18:53:28 UTC 2025
Package version: 12.1.3-r5
Build with comprehensive security fixes applied.
