sbt-bootstrap vulnerabilities (SUSE)

3 vulnerabilities.

• sbt-bootstrap SUSE Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file CVE-2024-25710 Fix available 8.1 HighFebruary 19, 2024
• sbt-bootstrap SUSE Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file CVE-2024-26308 Public exploitFix available 5.5 MediumFebruary 19, 2024
• sbt-bootstrap SUSE Arbitrary file write via archive extraction (Zip Slip) vulnerability in sbt CVE-2023-46122 Fix available 3.9 LowOctober 23, 2023