apachesolr 5.x-1.0-alpha5

This fixes a security hole - since it is still "alpha" there is no SA.

Some of the values (such as taxonomy term names, content type names, etc) displayed in the facet blocks are not properly filtered when the search result is filtered by that facet. Malicious users with permission to add or edit taxonomy terms (including free tagging), or with administrative permissions including 'administer content types' are able to exploit this issue and insert arbitrary HTML and script code into the block on the search result page. Such a cross site scripting attack (XSS) may lead to the malicious user gaining full administrative access.

The cross site scripting issue was reported by pwolanin from the Drupal security team and confirmed by janusman.