cve.nowby Sazabi

MavenPackage

org.apache.commons:commons-text

1 known vulnerability, with the versions each affects and the releases that fix them.

Latest release: 1.15.0 (Dec 4, 2025): no advisory affects it
Newest unaffected release: 1.15.0 (Dec 4, 2025), the latest release
Advisories: 1

Dependents: 7,704
Releases: 18 since 1.0 (Mar 6, 2017)
Registry: Maven Central
Releases read: Nov 8, 2026

Version timeline

CVE-2022-42889
Affects 1.5 to 1.9 (1.10.0 is outside it)

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 1

CVE-2022-42889Unrated
Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults
Affected: from 1.5, fixed in 1.10.0.
Fixed in 1.10.0 (released Sep 24, 2022, 19 days before disclosure).
The latest release, 1.15.0, is not affected.