Skip to content

libcommons-codec-java vulnerabilities (Ubuntu)

2 vulnerabilities.

libcommons-codec-java UbuntuApache Commons Codec: Blake3 doFinalize is stateless; the documented KDF example derives identical keysCVE-2026-1190789.1 CriticalNovember 9, 2026
libcommons-codec-java UbuntuApache Commons Codec: NUL bytes in tree entry names cause Git/SWHID identifier collisions (GitIdentifiers class)CVE-2026-1240774.3 MediumNovember 9, 2026