maven-resolver vulnerabilities (SUSE)

4 vulnerabilities.

• maven-resolver SUSE Apache Commons Lang, Apache Commons Lang: ClassUtils.getClass(...) can throw a StackOverflowError on very long inputs CVE-2025-48924 Public exploitFix available 5.3 MediumJuly 11, 2025
• maven-resolver SUSE Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file CVE-2024-25710 Fix available 8.1 HighFebruary 19, 2024
• maven-resolver SUSE Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file CVE-2024-26308 Public exploitFix available 5.5 MediumFebruary 19, 2024
• maven-resolver SUSE Arbitrary file write via archive extraction (Zip Slip) vulnerability in sbt CVE-2023-46122 Fix available 3.9 LowOctober 23, 2023