CVE-2018-1294 email header injection via bounce address (#161)

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: vharseko <6818498+vharseko@users.noreply.github.com>
Co-authored-by: Valery Kharseko <vharseko@3a-systems.ru>
Co-authored-by: Maxim Thomas <maxim.thomas@gmail.com>

Author: 3 people

legal/THIRDPARTYREADME.txt

@@ -50,7 +50,7 @@ Version: commons-codec-1.8.jar
 Copyright: Copyright 2002-2013 The Apache Software Foundation
            Copyright (C) 2002 Kevin Atkinson (kevina@gnu.org)
 
-Version: commons-email-1.2.jar
+Version: commons-email-1.6.0.jar
 Copyright: Copyright 2001-2009 The Apache Software Foundation
 
 Version: commons-fileupload-1.3.jar

pom.xml

@@ -702,6 +702,11 @@
                 <artifactId>animal-sniffer-annotations</artifactId>
                 <version>1.24</version>
             </dependency>
+            <dependency>
+                <groupId>org.apache.commons</groupId>
+                <artifactId>commons-email</artifactId>
+                <version>1.6.0</version>
+            </dependency>
         </dependencies>
     </dependencyManagement>