- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 11 · 1 high, 1 medium
- Registry
- Maven Central
Advisories 11
- CVE-2024-25710High 8.1
Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file
Affected: from 1.3, through 1.25.0; from 1.3, fixed in 1.26.0.
- CVE-2024-26308Medium 5.5
Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file
Affected: from 1.21, fixed in 1.26.0; from 1.21, fixed in 1.26.0.
- CVE-2023-42503Unrated
Apache Commons Compress: Denial of service via CPU consumption for malformed TAR file
Affected: from 1.22, fixed in 1.24.0; from 1.22, fixed in 1.24.0.
- CVE-2021-36090Unrated
Apache Commons Compress 1.0 to 1.20 denial of service vulnerability
Affected: fixed in 1.21.
- CVE-2021-35517Unrated
Apache Commons Compress 1.1 to 1.20 denial of service vulnerability
Affected: fixed in 1.21.
- CVE-2021-35516Unrated
Apache Commons Compress 1.6 to 1.20 denial of service vulnerability
Affected: fixed in 1.21.
- CVE-2021-35515Unrated
Apache Commons Compress 1.6 to 1.20 denial of service vulnerability
Affected: fixed in 1.21.
- CVE-2019-12402Unrated
The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with…
Affected: from 1.15, fixed in 1.19.
- CVE-2018-11771Unrated
When reading a specially crafted ZIP archive, the read method of Apache Commons Compress 1.7 to 1.17's ZipArchiveInputStream can fail to…
Affected: from 1.7, fixed in 1.18.
- CVE-2018-1324Unrated
A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the…
Affected: from 1.11, fixed in 1.16.
- CVE-2012-2098Unrated
Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons…
Affected: fixed in 1.4.1.