Search for packages
| purl | pkg:maven/org.apache.commons/commons-compress@1.21 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-4265-ccf5-phj5
Aliases: CVE-2024-26308 |
Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress. … |
Not vulnerable |
|
GHSA-4g9r-vxhx-9pgx
Aliases: CVE-2024-25710 |
Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file Loop with Unreachable Exit … |
Not vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-mc84-pj99-q6hh
|
Improper Handling of Length Parameter Inconsistency in Compress When reading a specially crafted ZIP archive, Compress can be made to … |
CVE-2021-36090
|
|
GHSA-xqfj-vm6h-2x34
|
Improper Handling of Length Parameter Inconsistency in Compress When reading a specially crafted TAR archive, Compress can be made to … |
CVE-2021-35517
|
|
GHSA-7hfm-57qf-j43q
|
Excessive Iteration in Compress When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress … |
CVE-2021-35515
|
|
GHSA-crv7-7245-f45f
|
Improper Handling of Length Parameter Inconsistency in Compress When reading a specially crafted 7Z archive, Compress can be made to … |
CVE-2021-35516
|
|
CVE-2021-35517
|
Uncontrolled Resource Consumption When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory … | |
|
CVE-2021-35516
|
Uncontrolled Resource Consumption When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory … | |
|
CVE-2021-35515
|
Excessive Iteration When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry … |