You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@activemq.apache.org by "Jakub Moravec (Jira)" <ji...@apache.org> on 2022/10/24 20:08:00 UTC

[jira] [Created] (ARTEMIS-4069) CVE-2022-42889: commons-text-1.9

Jakub Moravec created ARTEMIS-4069:
--------------------------------------

             Summary: CVE-2022-42889: commons-text-1.9
                 Key: ARTEMIS-4069
                 URL: https://issues.apache.org/jira/browse/ARTEMIS-4069
             Project: ActiveMQ Artemis
          Issue Type: Bug
          Components: ActiveMQ-Artemis-Native
    Affects Versions: 2.26.0
            Reporter: Jakub Moravec
            Assignee: Clebert Suconic


Based on [https://nvd.nist.gov/vuln/detail/CVE-2022-42889,] commons-text-1.9 (which is a transitive dependency of Artemis) is vulnerable due to the StringLookup feature. 

Please provide information about the impact (is Artemis vulnerable?), and ETA for upgrading to a non-vulnerable version. 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)