Search for packages
| purl | pkg:maven/org.apache.commons/commons-compress@1.5 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-mc84-pj99-q6hh
Aliases: CVE-2021-36090 |
Improper Handling of Length Parameter Inconsistency in Compress When reading a specially crafted ZIP archive, Compress can be made to … |
Vulnerable |
|
GHSA-xqfj-vm6h-2x34
Aliases: CVE-2021-35517 |
Improper Handling of Length Parameter Inconsistency in Compress When reading a specially crafted TAR archive, Compress can be made to … |
Vulnerable |
|
GHSA-7hfm-57qf-j43q
Aliases: CVE-2021-35515 |
Excessive Iteration in Compress When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress … |
Vulnerable |
|
GHSA-crv7-7245-f45f
Aliases: CVE-2021-35516 |
Improper Handling of Length Parameter Inconsistency in Compress When reading a specially crafted 7Z archive, Compress can be made to … |
Vulnerable |
|
GHSA-4g9r-vxhx-9pgx
Aliases: CVE-2024-25710 |
Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file Loop with Unreachable Exit … |
Not vulnerable |
|
CVE-2021-35517
|
Uncontrolled Resource Consumption When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory … |
Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2018-11771
|
When reading a specially crafted ZIP archive, the read method of Apache Commons Compress 1.7 to 1.17's ZipArchiveInputStream can fail … |