maven-assembly-plugin vulnerabilities (openSUSE)

3 vulnerabilities.

• maven-assembly-plugin openSUSE Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file CVE-2024-25710 Fix available 8.1 HighFebruary 19, 2024
• maven-assembly-plugin openSUSE Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file CVE-2024-26308 Public exploitFix available 5.5 MediumFebruary 19, 2024
• maven-assembly-plugin openSUSE Plexus Archiver vulnerable to Arbitrary File Creation in AbstractUnArchiver CVE-2023-37460 Public exploitFix available 8.1 HighJuly 25, 2023