CVE-2022-42889 in Apache Commons Text

[Bardnet]

Hi,

a few days ago I took notice of a security issue in the JAVA package Apache Commons Text.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42889

https://nvd.nist.gov/vuln/detail/CVE-2022-42889

I looked through ColdFusion installs on several servers and got the impression that package is not part of ColdFusion.

Has anyone heard of this issue in relation with ColdFusion?

Best,

Bernhard

[BKBK]

I have heard of the issue. but with no relation to ColdFusion.