# Opensearch - CVE-2022-42889 Apache Commons-Text RCE - opensearch-2.2.1

**URL:** <https://forum.opensearch.org/t/opensearch-cve-2022-42889-apache-commons-text-rce-opensearch-2-2-1/11477>\
**Category:** Security\
**Tags:** upgrade, cve\
**Created:** [November 11, 2022, 8:20am UTC](https://forum.opensearch.org/t/opensearch-cve-2022-42889-apache-commons-text-rce-opensearch-2-2-1/11477 "2022-11-11T08:20:11Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![ralph](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/ralph/32/1194_2.png) [@ralph](https://forum.opensearch.org/u/ralph)\
**Post date:** [November 14, 2022, 8:07am UTC](https://forum.opensearch.org/t/opensearch-cve-2022-42889-apache-commons-text-rce-opensearch-2-2-1/11477/2 "2022-11-14T08:07:28Z")

</div>

if you search in the forum for CVE-2022-42889 you’ll find this post which will show you that OpenSearch is not impacted by this CVE:

> [@CVE-2022-42889 by opensearch](https://forum.opensearch.org/t/cve-2022-42889-by-opensearch/11256/3):
>
> Hello @speechkey - I spoke with @davelago (SDM, OpenSeach) and he confirmed: Thank you for your message about the CVEs reported in OpenSearch versions 1 and 2. After a thorough review we have determined these versions are not impacted by CVE-2022-42889.

---

_[View the full topic](https://forum.opensearch.org/t/opensearch-cve-2022-42889-apache-commons-text-rce-opensearch-2-2-1/11477)._