Update 2186.yaml

New upstream release 1.3.1 fixes CVE-2013-2186 in commons-fileupload.