Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Apache Commons Compress may allow data tampering
published 3 months ago
Summary
The Apache Commons Compress library used in your applications has two security weaknesses that could let an attacker modify or corrupt processed data. TuxCare has released a rebuilt version that fixes these issues. Upgrade to version 1.21‑tuxcare.1 as soon as possible to protect your systems.
What to do
- Update apache org.apache.commons:commons-compress to version 1.21-tuxcare.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Maven | apache | org.apache.commons:commons-compress |
>= 1.21, < 1.21-tuxcare.1 Fix: upgrade to 1.21-tuxcare.1
|
Original advisory text
TuxCare security update for org.apache.commons:commons-compress (2 CVEs)
TuxCare rebuilt org.apache.commons:commons-compress to address 2 CVEs. Fixed in 1.21-tuxcare.1.
Timeline
Published4 Aug 2026
Updated15 Oct 2026
First seen15 Oct 2026
Sources
CLSA-2026-1779756518 · OSV
Track software like this
Free during beta