Known vulnerabilities in Apache Commons Text

Vendor: Apache Foundation
Software: Apache Commons Text
Software CPE: cpe:2.3:a:apache_foundation:text:*:*:*:*:*:*:*:*
Website: https://www.apache.org
Total vulnerabilities: 2
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Commons Text Apache Commons Text is affected by 2 known vulnerabilities: 1 high, 1 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68307 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42889		 CWE-94 High
Available
Exploited
 1.10.0 14.10.2022 SB2022101405
SB2022102709
SB2022110306
and 91 more
#VU34248 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-14040		 CWE-835 Medium
No
No
 - 17.06.2020 SB2020061731
SB2020100906
SB2020102814
and 25 more