Apache Software Foundation Apache Commons Compress

Name: Apache Software Foundation Apache Commons Compress
Brand: Apache Software Foundation

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical5high5medium0low

updated 2026-10-27

vulnerabilities (10)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-1324US	medium5.5	3.66% (90th)	Exploit	no fix	2018-03-16	≤ 1.11 to 1.15
CVE-2024-26308US	medium5.5	0.90% (59th)	Exploit	1.26.0	2024-02-19	2 versions
CVE-2019-12402US	high7.5	16.2% (97th)	—	no fix	2019-08-30	≤ 1.15 to 1.18
CVE-2021-36090US	high7.5	12.9% (96th)	—	no fix	2021-07-13	≤ Apache Commons Compress ≤1.20
CVE-2021-35516US	high7.5	12.4% (96th)	—	Apache Commons Compress*	2021-07-13	1.6 → Apache Commons Compress*
CVE-2021-35515US	high7.5	11.6% (96th)	—	Apache Commons Compress*	2021-07-13	1.6 → Apache Commons Compress*
CVE-2021-35517US	high7.5	10.6% (96th)	—	Apache Commons Compress*	2021-07-13	1.1 → Apache Commons Compress*
CVE-2018-11771US	medium5.5	5.25% (92nd)	—	no fix	2018-08-16	≤ 1.7 to 1.17
CVE-2023-42503US	medium5.5	0.60% (49th)	—	1.24.0	2023-09-14	1.22 → 1.24.0
CVE-2024-25710US	medium5.5	0.44% (38th)	—	no fix	2024-02-19	≤ 1.3 ≤1.25.0

The flaw types (CWEs) most of these CVEs share.

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.