Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/commons-fileupload/commons-fileupload@1.4
purl pkg:maven/commons-fileupload/commons-fileupload@1.4
Next non-vulnerable version 1.6.0
Latest non-vulnerable version 1.6.0
Risk score 3.9
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-vv7r-c36w-3prj
Aliases:
CVE-2025-48976
Apache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headers Allocation of resources for multipart headers with insufficient limits …
1.6.0
Not vulnerable
GHSA-hfrx-6qgj-fp6c
Aliases:
CVE-2023-24998
Apache Commons FileUpload denial of service vulnerability Apache Commons FileUpload before 1.5 does not limit the number of request parts …
1.5
Vulnerable
1.5
Vulnerable
CVE-2023-24998
Aliases:
GHSA-hfrx-6qgj-fp6c
Apache Commons FileUpload denial of service vulnerability Apache Commons FileUpload before 1.5 does not limit the number of request parts …
1.5
Vulnerable
This package is not known to fix any advisories.