dr|z3d
don't recall offhand if we're using apache commons text in the codebase, zzz, but headsup regardless: nakedsecurity.i2p/2022/10/18/dangerous-hole-in-apache-commons-text-like-log4shell-all-over-again
dr|z3d
appears we're safe?
dr|z3d
commons-el.jar and commons-logging.jar ?
dr|z3d
grepping for "commons-text" turns up nothing in java files.
zzz
not used