Known vulnerabilities in apache-commons-compress
Vendor:
SUSE
Software:
apache-commons-compress
Software CPE:
cpe:2.3:o:suse:apache-commons-compress:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU144731 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-26032 |
CWE-22 | Low | 1.28.0-150200.3.19.1 | 24.08.2026 |
SB20260824105 SB20260824106 SB20260824119 and 2 more |
||
| #VU113607 - Uncontrolled Recursion CVE-2025-48924 |
CWE-674 | Medium | 1.28.0-150200.3.21.1 | 04.08.2025 |
SB2025080422 SB2025080423 SB2025080427 and 182 more |
||
| #VU86625 - Resource exhaustion CVE-2024-26308 |
CWE-400 | Medium | 1.26.0-150200.3.16.1 | 20.02.2024 |
SB2024022033 SB2024022937 SB2024031520 and 138 more |
||
| #VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-25710 |
CWE-835 | Medium | 1.26.0-150200.3.16.1 | 20.02.2024 |
SB2024022033 SB2024022937 SB2024031520 and 103 more |