What’s pretty funny :
* commons-beanutils 1.7.0 has memory leaks, which were fixed in 1.8.0,
* commons-digester 1.8.1 depends on commons-beanutils 1.8.0,
* but in any case commons-beantuils and commons-beanutils-core - is a kind of duplication - from BeanUtils site : "commons-beanutils - contains everything; commons-beanutils-core - excludes Bean Collections classes".
One of the ways to fix this - exclude commons-beanutils-core from commons-configuration and enforce that only commons-beanutils used :
What all this means for you? Again - you decide ;) But for me (after all troubles with this library) it means that commons-configuration is a dead project and I will never use it as a dependency for my new projects.