[
https://issues.apache.org/jira/browse/CXF-8778?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17625046#comment-17625046
]
Ragul commented on CXF-8778:
----------------------------
Thanks for addressing this.
Please share if we have any planned release dates.
> Upgrade commons-text to address CVE-2022-42889
> ----------------------------------------------
>
> Key: CXF-8778
> URL: https://issues.apache.org/jira/browse/CXF-8778
> Project: CXF
> Issue Type: Bug
> Affects Versions: 3.5.4, 3.4.9
> Reporter: Ragul
> Priority: Critical
>
> Version 3.5.4 & 3.4.9 of CXF contains the apache commons-text vulnerable
> library (1.9)
> [CVE - CVE-2022-42889
> (mitre.org)|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42889]
> Fix was available in 1.10.0 commons-text
> Is there any plan to upgrade and address this issue?
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
