title: How to update or replace dependencies from other library in Maven probject?
body: <p>My project is using another library commons-collection, which I have no control of. I run the command:</p>
  
  <pre><code>mvn dependency:tree -Dverbose -Dincludes=commons-collections
  
  Verbose not supported since maven-dependency-plugin 3.0
  [INFO] com.jde.jnlu:jnlu-qe-web:war:1.0.0-SNAPSHOT
  [INFO] \- com.jde.jimi3.data:jd-jimi3-data-sdk:jar:3.0-SNAPSHOT:compile
  [INFO]    \- com.jde.jmq:jmq-client-spring:jar:2.1.2:compile
  [INFO]       \- com.jde.jmq:jmq-client-core:jar:2.1.2:compile
  [INFO]          \- com.jde.jmq:jmq-client-json:jar:1.2.9:compile
  [INFO]             \- commons-beanutils:commons-beanutils:jar:1.9.2:compile
  [INFO]                \- commons-collections:commons- 
               collections:jar:3.2.1:compile
  </code></pre>
  
  <p>As it can been seen, the "commons-collections" is introduced by jd-jimi3-data-sdk which I can't update. But I was reminded of the current version of "commons-collection" has a potential security issue and needs to be upgraded. How can I achieve that in my project? </p>