pkg:Maven/org.apache.commons:commons-compress

11 total CVEsHIGH5MEDIUM5

✅ Check your installed version

All known vulnerabilities

  • HIGH7.5CVE-2021-36090Improper Handling of Length Parameter Inconsistency in Compress
    from 0, < 1.21
  • HIGH7.5CVE-2021-35517Improper Handling of Length Parameter Inconsistency in Compress
    from 0, < 1.21
  • HIGH7.5CVE-2021-35516Improper Handling of Length Parameter Inconsistency in Compress
    from 0, < 1.21
  • HIGH7.5CVE-2021-35515Excessive Iteration in Compress
    from 0, < 1.21
  • HIGH7.5CVE-2019-12402Denial of Service in Apache Commons Compress
    >= 1.15, < 1.19
  • MEDIUM5.9CVE-2024-25710Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file
    >= 1.3, < 1.26.0
  • MEDIUM5.5CVE-2024-26308Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file
    >= 1.21, < 1.26.0
  • MEDIUM5.5CVE-2023-42503Apache Commons Compress denial of service vulnerability
    >= 1.22, < 1.24.0
  • MEDIUM5.5CVE-2018-1324Apache Commons Compress vulnerable to denial of service due to infinite loop
    >= 1.11, < 1.16
  • MEDIUM5.5CVE-2018-11771Moderate severity vulnerability that affects org.apache.commons:commons-compress
    >= 1.7, < 1.18
  • —CVE-2012-2098Uncontrolled Resource Consumption in Apache Commons Compress
    from 0, < 1.4.1