Upgrade grails plugin/versions to latest

[koww]

We have received a CVE ticket against commons-fileupload used in grails services comming from grails-web 5.3.0:
CVE-2023-24998
However we are not able to override the grails version because of the dependency import from the plugin dominates the versions.

Please provide configurations to manually set the dependency versions to resolve CVEs as necessary, or if it is configurable instructions are deeply appreciated.

[koww]

Or do we have any release date available for 6.x versions?

[jeffscottbrown]

FYI... I believe recent versions of Grails are using commons-fileupload 1.5 (https://github.com/grails/grails-core/blob/03944f1db542f22c367d901d480fa28f0bfafa5c/grails-web-fileupload/build.gradle#L3).