Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/io.github.1tchy.java9modular.org.apache.commons/commons-compress@1.18.1
purl pkg:maven/io.github.1tchy.java9modular.org.apache.commons/commons-compress@1.18.1
Next non-vulnerable version 1.19.0
Latest non-vulnerable version 1.19.0
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-z5bc-s8qs-zbh1
Aliases:
CVE-2019-12402
GHSA-53x6-4x5p-rrvv
Denial of Service in Apache Commons Compress The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress.
1.19.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T20:57:52.772501+00:00 GitLab Importer Affected by VCID-z5bc-s8qs-zbh1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.github.1tchy.java9modular.org.apache.commons/commons-compress/CVE-2019-12402.yml 38.4.0
2026-04-11T22:08:59.218519+00:00 GitLab Importer Affected by VCID-z5bc-s8qs-zbh1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.github.1tchy.java9modular.org.apache.commons/commons-compress/CVE-2019-12402.yml 38.3.0
2026-04-02T22:21:38.079977+00:00 GitLab Importer Affected by VCID-z5bc-s8qs-zbh1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.github.1tchy.java9modular.org.apache.commons/commons-compress/CVE-2019-12402.yml 38.1.0
2026-04-01T16:39:24.607551+00:00 GitLab Importer Affected by VCID-z5bc-s8qs-zbh1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.github.1tchy.java9modular.org.apache.commons/commons-compress/CVE-2019-12402.yml 38.0.0
2026-04-01T15:57:41.605259+00:00 GHSA Importer Affected by VCID-z5bc-s8qs-zbh1 https://github.com/advisories/GHSA-53x6-4x5p-rrvv 38.0.0