title: Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file
description: Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26.
Users are recommended to upgrade to version 1.26, which fixes the issue.
problem types: CWE-770 Allocation of Resources Without Limits or Throttling
affected:
{
collectionURL: https://repo.maven.apache.org/maven2/
defaultStatus: unaffected
packageName: org.apache.commons:commons-compress
product: Apache Commons Compress
vendor: Apache Software Foundation
versions:
lessThan: 1.26.0, status: affected, version: 1.21, versionType: semver
}
metrics:
other: [
content: {'text': 'moderate'}
type: Textual description of severity
]