Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Apache Commons Compress library can allow code execution
published 3 months ago
Summary
The Apache Commons Compress library used in your applications has several security weaknesses that could let an attacker run unwanted code on your system. TuxCare has released a new version (1.19‑tuxcare.2) that fixes these issues. Update the library to the new version as soon as possible to protect your environment.
What to do
- Update apache org.apache.commons:commons-compress to version 1.19-tuxcare.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Maven | apache | org.apache.commons:commons-compress |
>= 1.19, < 1.19-tuxcare.2 Fix: upgrade to 1.19-tuxcare.2
|
Original advisory text
TuxCare security update for org.apache.commons:commons-compress (4 CVEs)
TuxCare rebuilt org.apache.commons:commons-compress to address 4 CVEs. Fixed in 1.19-tuxcare.2.
Timeline
Published4 Aug 2026
Updated15 Oct 2026
First seen15 Oct 2026
Sources
CLSA-2026-1770941373 · OSV
Track software like this
Free during beta