Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.commons:commons-vfs2

2 known vulnerabilities (1 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 1 high, 1 medium
Registry
Maven Central

Advisories 2

  • Apache Commons VFS: Possible path traversal issue when using NameScope.DESCENDENT

    Affected: fixed in 2.10.0; fixed in 2.10.0.

  • CVE-2025-30474Medium 5.0

    Apache Commons VFS: Failing to find an FTP file can reveal the URI's password in an error message

    Affected: fixed in 2.10.0; fixed in 2.10.0.