1.21

DATE	CVE	VULNERABILITY TITLE	RISK
2024-02-19	CVE-2024-25710	Infinite Loop vulnerability in Apache Commons Compress Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to version 1.26.0 which fixes the issue. local low complexity apache CWE-835	5.5
2024-02-19	CVE-2024-26308	Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26, which fixes the issue. local low complexity apache CWE-770	5.5