Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.commons-collections@3.2.1
purl pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.commons-collections@3.2.1
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.5
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-32uq-r1e7-3ub4
Aliases:
CVE-2015-7501
GHSA-fjq5-5j5f-mvxh
InvokerTransformer code execution during deserialization This package allows code execution when deserializing objects involving a specially constructed chain of classes. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using the commons-collections library.
3.2.2
Affected by 0 other vulnerabilities.
VCID-6r87-jrv8-27ht
Aliases:
CVE-2015-6420
GHSA-6hgm-866r-3cjv
Insecure Deserialization in Apache Commons Collection Serialized-object interfaces in Java applications using the Apache Commons Collections (ACC) library may allow remote attackers to execute arbitrary commands via a crafted serialized Java object. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-02T12:36:50.435876+00:00 GitLab Importer Affected by VCID-6r87-jrv8-27ht https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.commons-collections/CVE-2015-6420.yml 38.0.0
2026-04-01T16:01:29.441057+00:00 GHSA Importer Affected by VCID-32uq-r1e7-3ub4 https://github.com/advisories/GHSA-fjq5-5j5f-mvxh 38.0.0
2026-04-01T15:58:16.615059+00:00 GHSA Importer Affected by VCID-6r87-jrv8-27ht https://github.com/advisories/GHSA-6hgm-866r-3cjv 38.0.0
2026-04-01T12:50:24.618037+00:00 GitLab Importer Affected by VCID-32uq-r1e7-3ub4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.commons-collections/CVE-2015-7501.yml 38.0.0