Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.commons/commons-compress@1.24.0
purl pkg:maven/org.apache.commons/commons-compress@1.24.0
Next non-vulnerable version 1.26.0
Latest non-vulnerable version 1.26.0
Risk score 3.0
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-4265-ccf5-phj5
Aliases:
CVE-2024-26308
Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress. …
1.26.0
Not vulnerable
GHSA-4g9r-vxhx-9pgx
Aliases:
CVE-2024-25710
Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file Loop with Unreachable Exit …
1.26.0
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-cgwf-w82q-5jrr
Apache Commons Compress denial of service vulnerability Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR … CVE-2023-42503