Apache Software Foundation Commons Codec vulnerabilities
- apache software foundation commons codecApache Commons Codec: Blake3 doFinalize is stateless; the documented KDF example derives identical keys9.1 Critical
- apache software foundation commons codecApache Commons Codec: NUL bytes in tree entry names cause Git/SWHID identifier collisions (GitIdentifiers class)4.3 Medium