Apache Software Foundation Apache Commons Text

1 published vulnerability names this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2022-42889unspecified – 1.9 ; 1.5 – < Apache Commons Text*Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaultsCRITICAL 9.8100 %