Apache commons-lang should be updated to mitigate the issue documented below:

https://issues.apache.org/jira/browse/LANG-805

These are fixed in the latest version (note the new artifact name: https://mvnrepository.com/artifact/org.apache.commons/commons-lang3).

This is causing issues with our dependency scanning software (whitesource) as these issues are marked as blockers.