Skip to content

Product

io.github.1tchy.java9modular.org.apache.commons/commons-compress vulnerabilities

1 published CVE affecting io.github.1tchy.java9modular.org.apache.commons/commons-compress, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest io.github.1tchy.java9modular.org.apache.commons/commons-compress CVEs

Newest publication first

  1. CVE-2019-12402 Denial of Service in Apache Commons Compress

    Published
    HighCVSS 7.5 PoC

    The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Co...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.