Apache Commons has 43 components: https://commons.apache.org/ https://commons.apache.org/ If the vulnerability is just in one component, it is important to be

Apache Commons has 43 components: https://commons.apache.org/ https://commons.apache.org/ If the vulnerability is just in one component, it is important to be specific about which one it is. Does anyone know what depends on Commons Text? Edit: "Artifacts using Apache Commons Text" according to Maven: https://mvnrepository.com/artifact/org.apache.commons/commons-text/usages https://mvnrepository.com/artifact/org.apache.commons/common... There are some well-known projects that might be impacted: Hadoop, Spark, Velocity, Hive, Solr, and many more.