The Byte Code Engineering Library is intended to give users a convenient way to analyze, create, and manipulate Java class files . Security Fix: * Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.