Community users are experiencing Velocity Engine 2.3 being incorrectly flagged as vulnerable to CVE-2024-47554 as a couple of classes from commons-io are shaded in.

If we can update to 2.4.1 this version also no longer shades in commons-io classes.