5344 matches found
PT-2026-80081
TuxCare rebuilt commons-fileupload:commons-fileupload to address 2 CVEs. Fixed in 1.3.1-tuxcare.2...
Security Bulletin: Apache Commons Configuration Denial of Service via YAML Cycle
Summary Apache Commons Configuration versions 2.2 through 2.14.x are vulnerable to an uncontrolled recursion denial of service. When parsing an untrusted YAML configuration file that contains cyclic references, the library throws a StackOverflowError, which can crash the processing thread and mak...
CLSA-2026-1785947990 TuxCare security update for org.apache.commons:commons-compress (3 CVEs)
TuxCare rebuilt org.apache.commons:commons-compress to address 3 CVEs. Fixed in 1.15-tuxcare.1...
Malicious code in bigops-products-timeline-commons (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a98df74705a505fc378b760c3560eea108ccdce63e33c8733b56730efe324e The package advertises itself as shared primitive types with a trivial no-op class in index.js, but index.js unconditionally requires loader.js, whos...
CLSA-2026-1785936779 TuxCare security update for org.apache.commons:commons-compress (2 CVEs)
TuxCare rebuilt org.apache.commons:commons-compress to address 2 CVEs. Fixed in 1.14-tuxcare.1...
MAL-2026-12281 Malicious code in tinkoff-terminal-kit-test-commons (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c68d83a8e515bebce3319c94274060bdfcef42f2ba45e96e87515c9cfd11e020 On require of [email protected], index.js loads adapter.js which selects a platform-specific endpoint, downloads an opaque...
CLSA-2026-1785909110 TuxCare security update for org.apache.commons:commons-compress (1 CVE)
TuxCare rebuilt org.apache.commons:commons-compress to address 1 CVE. Fixed in 1.12-tuxcare.1...
CLSA-2026-1785906695 TuxCare security update for commons-fileupload:commons-fileupload (2 CVEs)
TuxCare rebuilt commons-fileupload:commons-fileupload to address 2 CVEs. Fixed in 1.3.1-tuxcare.1...
PT-2026-75883
TuxCare rebuilt org.apache.commons:commons-compress to address 3 CVEs. Fixed in 1.15-tuxcare.1...
PT-2026-75864
TuxCare rebuilt commons-fileupload:commons-fileupload to address 2 CVEs. Fixed in 1.3.1-tuxcare.1...
PT-2026-75866
TuxCare rebuilt org.apache.commons:commons-compress to address 1 CVE. Fixed in 1.12-tuxcare.1...
CLSA-2026-1784769559 TuxCare security update for org.apache.commons:commons-compress (1 CVE)
TuxCare rebuilt org.apache.commons:commons-compress to address 1 CVE. Fixed in 1.8.1-tuxcare.1...
CLSA-2026-1784769508 TuxCare security update for org.apache.commons:commons-compress (1 CVE)
TuxCare rebuilt org.apache.commons:commons-compress to address 1 CVE. Fixed in 1.18-tuxcare.2...
CLSA-2026-1784682834 TuxCare security update for org.apache.commons:commons-configuration2 (1 CVE)
TuxCare rebuilt org.apache.commons:commons-configuration2 to address 1 CVE. Fixed in 2.12.0-tuxcare.1...
CLSA-2026-1784250510 TuxCare security update for commons-io:commons-io (1 CVE)
TuxCare rebuilt commons-io:commons-io to address 1 CVE. Fixed in 2.8.0-tuxcare.1...
CLSA-2026-1784077513 TuxCare security update for com.mchange:mchange-commons-java (1 CVE)
TuxCare rebuilt com.mchange:mchange-commons-java to address 1 CVE. Fixed in 0.2.19-tuxcare.1...
CLSA-2026-1784250509 TuxCare security update for org.apache.commons:commons-compress (1 CVE)
TuxCare rebuilt org.apache.commons:commons-compress to address 1 CVE. Fixed in 1.18-tuxcare.1...
CLSA-2026-1783991044 TuxCare security update for com.mchange:mchange-commons-java (1 CVE)
TuxCare rebuilt com.mchange:mchange-commons-java to address 1 CVE. Fixed in 0.2.20-tuxcare.1...