Apache Commons BeanUtils v1.11.0 patches [CVE-2025-48734](https://nvd.nist.gov/vuln/detail/CVE-2025-48734) which potentially might affect ESAPI's AccessController component.