maven-reporting-impl vulnerabilities (openSUSE)

3 vulnerabilities.

• maven-reporting-impl openSUSE Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file CVE-2024-25710 Fix available 8.1 HighFebruary 19, 2024
• maven-reporting-impl openSUSE Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file CVE-2024-26308 Public exploitFix available 5.5 MediumFebruary 19, 2024
• maven-reporting-impl openSUSE Velocity Sandbox Bypass CVE-2020-13936 Fix available EPSS 22.7% 8.8 HighMarch 10, 2021