Search for packages
Package details: pkg:deb/debian/libcommons-fileupload-java@1.5-1.1
purl pkg:deb/debian/libcommons-fileupload-java@1.5-1.1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-8sa7-2dgp-t7gv
Aliases:
CVE-2025-48976
GHSA-vv7r-c36w-3prj
Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects Apache Commons FileUpload: from 1.0 before 1.6; from 2.0.0-M1 before 2.0.0-M4. Users are recommended to upgrade to versions 1.6 or 2.0.0-M4, which fix the issue. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-08-01T12:29:28.121596+00:00 Debian Importer Affected by VCID-8sa7-2dgp-t7gv https://security-tracker.debian.org/tracker/data/json 37.0.0