Known vulnerabilities in Apache Commons Compress

Vendor: Apache Foundation
Software: Apache Commons Compress
Software CPE: cpe:2.3:a:apache_foundation:apache_commons_compress:*:*:*:*:*:*:*:*
Website: https://www.apache.org
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Commons Compress Apache Commons Compress is affected by 12 known vulnerabilities: 1 high, 9 medium, 2 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU108024 - Improper Handling of Length Parameter Inconsistency
CVE-2021-33517		 CWE-130 High
No
No
 1.21 29.04.2025 SB2021041398
SB2022021539
#VU86625 - Resource exhaustion
CVE-2024-26308		 CWE-400 Medium
No
No
 1.26.0 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 138 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710		 CWE-835 Medium
No
No
 1.26.0 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 102 more
#VU80788 - Resource exhaustion
CVE-2023-42503		 CWE-400 Medium
No
No
 1.24.0 14.09.2023 SB2023091434
SB2023111725
SB2023112014
and 30 more
#VU74271 - Resource exhaustion
CVE-2012-2098		 CWE-400 Medium
No
No
 1.4.1 31.03.2023 SB2012062904
SB2023040315
SB2023040465
and 10 more
#VU54854 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-35515		 CWE-835 Medium
No
No
 1.21 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 23 more
#VU54853 - Resource exhaustion
CVE-2021-36090		 CWE-400 Medium
No
No
 1.21 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 70 more
#VU54852 - Resource exhaustion
CVE-2021-35517		 CWE-400 Medium
No
No
 1.21 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 33 more
#VU54851 - Resource exhaustion
CVE-2021-35516		 CWE-400 Medium
No
No
 1.21 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 21 more
#VU22185 - Resource Management Errors
CVE-2019-12402		 CWE-399 Medium
No
No
 1.19 23.10.2019 SB2019083014
SB2020042210
SB2020071665
and 13 more
#VU14441 - Improper input validation
CVE-2018-11771		 CWE-20 Low
No
No
 1.18 16.08.2018 SB2018081704
SB2020032701
SB2022072128
and 6 more
#VU11170 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-1324		 CWE-835 Low
No
No
 - 19.03.2018 SB2018032004
SB2018052906
SB2022011837
and 3 more