apache-commons-compress vulnerabilities (Red Hat)

12 vulnerabilities.

• apache-commons-compress Red Hat Plexus-Utils has a Directory Traversal vulnerability in its extractFile method CVE-2025-67030 Fix available 8.8 HighMarch 25, 2026
• apache-commons-compress Red Hat Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default CVE-2025-48734 Public exploitFix available 8.8 HighMay 28, 2025
• apache-commons-compress Red Hat Exposure of Sensitive Information to an Unauthorized Actor in semantic-release CVE-2022-31051 Fix available 4.4 MediumJune 9, 2022
• apache-commons-compress Red Hat Allocation of Resources Without Limits or Throttling in Spring Framework CVE-2022-22950 Fix available EPSS 36.9% 6.5 MediumApril 1, 2022
• apache-commons-compress Red Hat Improper Output Neutralization for Logs in Spring Framework CVE-2021-22096 Fix available 4.3 MediumOctober 28, 2021
• apache-commons-compress Red Hat Inefficient Regular Expression Complexity in chalk/ansi-regex CVE-2021-3807 Fix available 7.5 HighSeptember 17, 2021
• apache-commons-compress Red Hat Apache Commons Compress 1.0 to 1.20 denial of service vulnerability CVE-2021-36090 Fix available EPSS 12.9% 7.5 HighJuly 13, 2021
• apache-commons-compress Red Hat Apache Commons Compress 1.1 to 1.20 denial of service vulnerability CVE-2021-35517 Fix available EPSS 10.6% 7.5 HighJuly 13, 2021
• apache-commons-compress Red Hat Apache Commons Compress 1.6 to 1.20 denial of service vulnerability CVE-2021-35516 Fix available EPSS 12.4% 7.5 HighJuly 13, 2021
• apache-commons-compress Red Hat Apache Commons Compress 1.6 to 1.20 denial of service vulnerability CVE-2021-35515 Fix available EPSS 11.6% 7.5 HighJuly 13, 2021
• apache-commons-compress Red Hat Uncontrolled Resource Consumption in trim-newlines CVE-2021-33623 Fix available 7.5 HighMay 28, 2021
• apache-commons-compress Red Hat Insecure Deserialization in Apache Commons Beanutils CVE-2019-10086 Fix available EPSS 29.1% 7.3 HighAugust 20, 2019