Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.commons/commons-compress@1.22
purl pkg:maven/org.apache.commons/commons-compress@1.22
Next non-vulnerable version 1.26.0
Latest non-vulnerable version 1.26.0
Risk score 3.0
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-4265-ccf5-phj5
Aliases:
CVE-2024-26308
Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress. …
1.26.0
Not vulnerable
GHSA-4g9r-vxhx-9pgx
Aliases:
CVE-2024-25710
Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file Loop with Unreachable Exit …
1.26.0
Not vulnerable
GHSA-cgwf-w82q-5jrr
Aliases:
CVE-2023-42503
Apache Commons Compress denial of service vulnerability Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR …
1.24.0
Vulnerable
This package is not known to fix any advisories.