maven-jar-plugin vulnerabilities (SUSE)

2 vulnerabilities.

• maven-jar-plugin SUSE Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file CVE-2024-25710 Fix available 8.1 HighFebruary 19, 2024
• maven-jar-plugin SUSE Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file CVE-2024-26308 Public exploitFix available 5.5 MediumFebruary 19, 2024