NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
Maven Central
The Apache Commons FileUpload Jakarta component provides a simple yet flexible means of adding support for multipart file upload functionality to Jakarta servlets and web applications.
Last release 8 months ago
08 Feb 2026
Release timing varies
gaps range from 5 weeks to 1.4 years
Unknown
no stable releases
Nothing withdrawn
no release was ever pulled
3 years old
4 releases · first in 2023
Create release tag for Apache Commons FileUpload release 2.0.0-M5.
Create release tag for Apache Commons FileUpload release 2.0.0-M5.
The Apache Commons FileUpload team is pleased to announce the release of Apache Commons FileUpload 2.0.0-M5.
The Apache Commons FileUpload component provides a simple yet flexible means of adding support for multipart file upload functionality to Servlets and web applications. This version requires Java 11 or above.
This release requires Java 11.
Changes in version 2.0.0-M5 include:
New features: o Add AbstractFileUpload support for a maximum part header size #429. Thanks to Ryan J Murphy. o FILEUPLOAD-367: Jakarta and Javax ServletFileUpload.isMultipartContent(HttpServletRequest) should allow PUT and PATCH request methods in addition to POST. Thanks to Gary Gregory. o FILEUPLOAD-367: Add AbstractFileUpload.isMultipartRequestMethod(String). Thanks to Gary Gregory.
Fixed Bugs: o Better exception message in org.apache.commons.fileupload2.core.AbstractFileUpload.parseRequest(RequestContext). Thanks to Chenjp, Gary Gregory. o FILEUPLOAD-295: Clarified the precise meaning of isInMemory(), get(), getPath(), etc. in DiskFileItem o Better exception type and message if a multipart/mixed part is presented without a boundary defined Thanks to Coverity Scan. o Rename MultipartInput.Builder.[get|set]PartHeaderSizeMax() to [get|set]MaxPartHeaderSize(). Thanks to Gary Gregory. o Rename MultipartInput.getPartHeaderSizeMax() to getMaxPartHeaderSize(). Thanks to Gary Gregory. o Rename AbstractFileUpload.[get|set]SizeMax() to AbstractFileUpload.[get|set]MaxSize(). Thanks to Gary Gregory. o Rename AbstractFileUpload.[get|set]FileSizeMax() to AbstractFileUpload.[get|set]MaxFileSize(). Thanks to Gary Gregory. o Rename AbstractFileUpload.[get|set]FileCountMax() to AbstractFileUpload.[get|set]MaxFileCount(). Thanks to Gary Gregory. o Minor readability and cleanup improvements in DiskFileItem #458. Thanks to tPionTech. o Fix Apache RAT plugin console warnings. Thanks to Gary Gregory.
Changes: o Bump org.apache.commons:commons-parent from 84 to 96 #444, #459, #463. Thanks to Gary Gregory, Dependabot. o Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.20.0 #427. Thanks to Gary Gregory. o Bump commons-io:commons-io from 2.19.0 to 2.21.0. Thanks to Gary Gregory.
For complete information on Apache Commons FileUpload, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons FileUpload website:
https://commons.apache.org/proper/commons-fileupload/
Download it from https://commons.apache.org/proper/commons-fileupload/download_fileupload.cgi
One column per month.
Create release tag for Apache Commons FileUpload release 2.0.0-M4.
Create release tag for Apache Commons FileUpload release 2.0.0-M4.
The Apache Commons FileUpload team is pleased to announce the release of Apache Commons FileUpload 2.0.0-M4.
The Apache Commons FileUpload component provides a simple yet flexible means of adding support for multipart file upload functionality to Servlets and web applications. This version requires Java 11 or above.
This release requires Java 11.
Changes in version 2.0.0-M4 include:
New features: o SECURITY - CVE-2025-48976. Add partHeaderSizeMax, a new limit that sets a maximum number of bytes for each individual multipart header. The default is 512 bytes. Thanks to Mark Thomas.
Fixed Bugs: o Simplify exception handling in FileItem API #309. Thanks to Basil Crow.
For complete information on Apache Commons FileUpload, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons FileUpload website:
https://commons.apache.org/proper/commons-fileupload/
Download it from https://commons.apache.org/proper/commons-fileupload/download_fileupload.cgi
Create release tag for Apache Commons FileUpload release 2.0.0-M3.
Create release tag for Apache Commons FileUpload release 2.0.0-M3.
The Apache Commons FileUpload team is pleased to announce the release of Apache Commons FileUpload 2.0.0-M3.
The Apache Commons FileUpload component provides a simple yet flexible means of adding support for multipart file upload functionality to Servlets and web applications. This version requires Java 11 or above.
This release requires Java 11.
Changes in version 2.0.0-M3 include:
New features: o Handle multipart/related Requests without content-disposition header. Thanks to mufasa1976, Gary Gregory.
Fixed Bugs: o [site] Fix instantiation of DiskFileItemFactory in migration guide #273. Thanks to Gregor Dschung. o FILEUPLOAD-355: [site] Update code example: Use IOUtils instead of Streams utils class. Thanks to Ana, Gary Gregory. o Replace internal use of Locale.ENGLISH with Locale.ROOT. Thanks to Gary Gregory. o Pick up JUnit version from parent POM. Thanks to Gary Gregory. o FILEUPLOAD-356: [site] Fix incorrect link to changes report in Commons FileUpload #357. Thanks to Mattias Reichel, GirirajSinghRathore, Gary Gregory. o Fix changes report link for new version of Maven Changes plugin from commons-parent 79 #388. Thanks to Filipe Roque. o Fix SpotBugs multithreading issues in DiskFileItem. Thanks to Gary Gregory.
Changes: o Bump org.apache.commons:commons-parent from 66 to 83 #283, #294, #335, #343, #345, #351, #356, #360, #368. Thanks to Gary Gregory. o Bump commons-io:commons-io from 2.16.0 to 2.19.0 #297, #352, #377. Thanks to Gary Gregory. o Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.3 to 3.7.0 #319. Thanks to Gary Gregory. o Bump org.codehaus.mojo:taglist-maven-plugin from 3.0.0 to 3.1.0 #327. Thanks to Gary Gregory. o Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.17.0 #331, #338, #346. Thanks to Gary Gregory.
For complete information on Apache Commons FileUpload, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons FileUpload website:
https://commons.apache.org/proper/commons-fileupload/
Download it from https://commons.apache.org/proper/commons-fileupload/download_fileupload.cgi
Create release tag for Apache Commons FileUpload release 2.0.0-M2.
Create release tag for Apache Commons FileUpload release 2.0.0-M2.
The Apache Commons FileUpload team is pleased to announce the release of Apache Commons FileUpload 2.0.0-M2.
The Apache Commons FileUpload component provides a simple yet flexible means of adding support for multipart file upload functionality to Servlets and web applications. This version requires Java 11 or above.
2.0.0-M2 Release
Changes in version 2.0.0-M2 include:
New features: o Fix off-by-one error when checking fileSizeMax in FileItemInputImpl #235. Thanks to James Reeves. o FILEUPLOAD-352: NullPointerException in DiskFileItem#toString. Thanks to Bj�rn Kautler, Gary Gregory. o Fail fast on null inputs to org.apache.commons.fileupload2.core.AbstractRequestContext.AbstractRequestContext(Function, LongSupplier, T). Thanks to Gary Gregory. o Complete refactoring in JakartaServletRequestContext. Thanks to Gary Gregory. o Fix "Implicit narrowing conversion in compound assignment" from https://github.com/apache/commons-fileupload/security/code-scanning/118. Thanks to Gary Gregory. o Refactor to support Jakarta Servlet 5 and 6. Thanks to Gary Gregory. o Generate some OSGi metadata. Thanks to Michal H Siemaszko, Gary Gregory.
Fixed Bugs: o Pick up Maven Moditect plugin version from parent POM. Thanks to Gary Gregory.
Changes: o Bump Java from 8 to 11. Thanks to Dependabot. o Bump commons-parent from 58 to 65. Thanks to Gary Gregory. o Bump commons-lang3 from 3.12.0 to 3.14.0. Thanks to Gary Gregory. o Bump commons-io from 2.13.0 to 2.15.1. Thanks to Gary Gregory.
For complete information on Apache Commons FileUpload, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons FileUpload website:
https://commons.apache.org/proper/commons-fileupload/
Download it from https://commons.apache.org/proper/commons-fileupload/download_fileupload.cgi
Your coding agent can read these notes before it upgrades. Set up the MCP server →