Apache Commons-text library vulnerability

[ganncamp (G Ann Campbell)]

Hi,

Please refer to this thread:

CVE-2022-42889 effect on SonarQube

Hi All, I want to know a small info on whether sonarqube version 9.3 & 9.5 has any affect with CVE-2022-42889 We have verified the source code on github, couldn’t see any library related to org.apache.commons:commons-text so want to get the confirmation on the same. Sonar version : 9.3 & 9.5

 
Ann