Package Health/org.apache.solr:solr-core

solr-core

Apache Solr (module: core)

Latest 10.0.0org.apache.solr

Maven

86%

Total Score

Dependencies

Maturity

100

Supply Chain

100

Attestations

100

Are you affected? Scan for Free

Health Score Breakdown

Dependency profile

The 71 runtime dependencies reflect the broad server and indexing functionality of Solr core, but they increase dependency-management and transitive-maintenance complexity.

Vulnerabilities

Title	Versions	Severity
CVE-2026-44825 org.apache.solr:solr-core is vulnerable to Use of Hard-coded Credentials in versions 9.4.0 - 9.10.1 and 10.0.0 - 10.0.0.	9.4.0 - 9.10.110.0.0 - 10.0.0	High
CVE-2026-22444 org.apache.solr:solr-core is vulnerable to Improper Input Validation in versions 8.6.0 - 9.10.1.	8.6.0 - 9.10.1	High
CVE-2026-22022 org.apache.solr:solr-core is vulnerable to Improper Authorization in versions 5.3.0 - 9.10.1.	5.3.0 - 9.10.1	High
CVE-2025-24814 org.apache.solr:solr-core is vulnerable to Execution with Unnecessary Privileges in versions 0.0.0 - 9.8.0.	0.0.0 - 9.8.0	High
CVE-2024-52012 org.apache.solr:solr-core is vulnerable to Relative Path Traversal in versions 6.6 - 9.8.0.	6.6 - 9.8.0	Medium

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
org.apache.lucene:lucene-core Version 10.3.2	—	—
org.apache.lucene:lucene-analysis-common Version 10.3.2	—	—
org.apache.lucene:lucene-queries Version 10.3.2	—	—
org.slf4j:slf4j-api Version 2.0.17	—	—
org.apache.solr:solr-api Version 10.0.0	—	—