# Vulnerability (CVE-2022-42889) Apache Commons Text

**URL:** <https://discuss.elastic.co/t/vulnerability-cve-2022-42889-apache-commons-text/317009>\
**Category:** Elasticsearch\
**Created:** [October 19, 2022, 1:25pm UTC](https://discuss.elastic.co/t/vulnerability-cve-2022-42889-apache-commons-text/317009 "2022-10-19T13:25:35Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![mduijkers](https://avatars.discourse-cdn.com/v4/letter/m/71c47a/32.png) [@mduijkers](https://discuss.elastic.co/u/mduijkers)\
**Post date:** [October 19, 2022, 1:25pm UTC](https://discuss.elastic.co/t/vulnerability-cve-2022-42889-apache-commons-text/317009/1 "2022-10-19T13:25:35Z")

</div>

Vulnerability (CVE-2022-42889) Apache Commons Text. For this vulnerability ES needs to upgrade to Apache Commons Text 1.10.0  
Source: [https://lists.apache.org/thread/n2bd4vdsgkqh2tm14l1wyc3jyol7s1om](https://lists.apache.org/thread/n2bd4vdsgkqh2tm14l1wyc3jyol7s1om)

Which version of ES is proof for this.  
What is the current impact of this vulnerability within ES

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 19, 2022, 8:56pm UTC](https://discuss.elastic.co/t/vulnerability-cve-2022-42889-apache-commons-text/317009/2 "2022-10-19T20:56:55Z")

</div>

Welcome to our community! 😃

Please see [Impact of CVE-2022-42889 on Elastic stack](https://discuss.elastic.co/t/impact-of-cve-2022-42889-on-elastic-stack/316858), we will update that.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 19, 2022, 8:56pm UTC](https://discuss.elastic.co/t/vulnerability-cve-2022-42889-apache-commons-text/317009/3 "2022-10-19T20:56:58Z")

</div>