Is there a problem with replacing commons-text-1.6.jar and commons-text-1.9.jar with commons-text-1.10.0.jar (related to security alert CVE-2022-42889 / QID 377639 Text4Shell)?

kmansouri / OPERA

Free and open-source application (command line and GUI) providing QSAR models predictions as well as applicability domain and accuracy assessment for physicochemical properties, environmental fate and toxicological endpoints. ==================>Download the latest compiled version from the "releases" tab and run the executable installer.

MIT License

91 stars 40 forks source link

Is there a problem with replacing commons-text-1.6.jar and commons-text-1.9.jar with commons-text-1.10.0.jar (related to security alert CVE-2022-42889 / QID 377639 Text4Shell)? #40

Closed P-raying closed 4 months ago

P-raying commented 11 months ago

Is there a problem with replacing commons-text-1.6.jar and commons-text-1.9.jar with commons-text-1.10.0.jar (related to security alert CVE-2022-42889 / QID 377639 Text4Shell)? Is there a compatibility issue with OPERA?

Thank you,

kmansouri commented 6 months ago

I haven't tried that but it shouldn't be a problem. Where is that file located? and what type of security issue is it causing? If you did please let me know how it went. Thanks