I created and downloaded a starter project from https://start.vaadin.com/app with the following
Flow + Vaadin 24.8 + Java 21 LTS
After importing it into IntelliJ IDEA 2025.2.1 (Community Edition), Build #IC-252.25557.131, built on August 28, 2025, I noticed the IDE warning about dependency vulnerability.
Further drilling down indicates maven:org.apache.commons:commons-lang3:3.17.0 to be the culprit. I have attached the SS for reference.
Is it one of those false positive and OK to continue?
