Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26.
Users are recommended to upgrade to version 1.26, which fixes the issue.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libcommons-compress-java | May 15, 2025 | Feb 19, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 36805124 for version 12.2.1.4.0.Apply the Patch Set Update (PSU) 36781850 for version 14.1.1.0.0. | Apr 25, 2024 | Feb 19, 2024 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.7Upgrade Splunk Enterprise to version 9.2.4Upgrade Splunk Enterprise to version 9.3.2 | Jul 30, 2026 | Feb 19, 2024 |
| Suse | — | Upgrade maven-reporting-impl-javadocUpgrade ivy-localUpgrade maven-doxia-module-foUpgrade maven-doxia-sink-apiUpgrade maven-resolver-connector-basicUpgrade xmvn-resolveUpgrade maven-javadoc-plugin-javadocUpgrade maven-resources-plugin-bootstrapUpgrade xmvnUpgrade xmvn-mojoUpgrade maven-resolver-transport-classpathUpgrade maven-doxia-module-rtfUpgrade maven-doxia-module-twikiUpgrade xmvn-installUpgrade maven-jar-pluginUpgrade maven-doxia-module-docbook-simpleUpgrade maven-doxia-module-fmlUpgrade apache-commons-io-javadocUpgrade maven-javadoc-pluginUpgrade gradle-localUpgrade maven-reporting-implUpgrade maven-jar-plugin-bootstrapUpgrade apache-commons-codecUpgrade maven-assembly-pluginUpgrade maven-doxia-module-xhtml5Upgrade apache-commons-ioUpgrade maven-resolver-javadocUpgrade maven-resolver-transport-fileUpgrade maven-resources-plugin-javadocUpgrade xmvn-substUpgrade xmvn-coreUpgrade maven-libUpgrade apache-commons-compressUpgrade maven-resolver-test-utilUpgrade maven-doxia-module-confluenceUpgrade maven-jar-plugin-javadocUpgrade maven-doxia-test-docsUpgrade maven-javadocUpgrade maven-resolver-transport-wagonUpgrade maven-doxia-sitetoolsUpgrade mavenUpgrade xmvn-minimalUpgrade maven-resolver-transport-httpUpgrade maven-resolver-apiUpgrade maven-assembly-plugin-javadocUpgrade xmvn-parentUpgrade maven-doxia-module-xhtmlUpgrade sbt-bootstrapUpgrade maven-doxia-module-xdocUpgrade maven-doxia-javadocUpgrade maven-doxia-module-latexUpgrade xmvn-mojo-javadocUpgrade apache-commons-codec-javadocUpgrade maven-doxia-sitetools-javadocUpgrade maven-resolver-utilUpgrade maven-localUpgrade xmvn-connectorUpgrade sbtUpgrade maven-resources-pluginUpgrade maven-reporting-apiUpgrade maven-doxia-module-aptUpgrade maven-doxia-coreUpgrade xmvn-connector-javadocUpgrade maven-resolver-implUpgrade maven-reporting-api-javadocUpgrade apache-commons-compress-javadocUpgrade apache-commons-configuration2Upgrade maven-resolver-spiUpgrade maven-resolverUpgrade apache-commons-configuration2-javadocUpgrade maven-javadoc-plugin-bootstrapUpgrade xmvn-apiUpgrade maven-doxia-logging-apiUpgrade xmvn-tools-javadocUpgrade maven-resolver-named-locks | Mar 1, 2024 | Feb 19, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub