`org.apache.commons:commons-compress`

Ecosystem:
maven

Package URL:
pkg:maven/org.apache.commons:commons-compress

Total PRs:
748 Dependabot PRs

Latest PR:
about 1 month ago

Unique Repositories:
448 repositories

Unique Repos (30 days):
3 repositories

Security Advisories

Uncontrolled Resource Consumption in Apache Commons Compress

GHSA-6fxm-66hq-fc96 CVE-2012-2098 MODERATE published about 4 years ago • updated 29 days ago

Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress...

Improper Handling of Length Parameter Inconsistency in Compress

GHSA-mc84-pj99-q6hh CVE-2021-36090 HIGH published almost 5 years ago • updated 4 days ago

When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error...

Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file

GHSA-4g9r-vxhx-9pgx CVE-2024-25710 MODERATE published over 2 years ago • updated 11 days ago

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress. This issue affects Apache Commons Compress: from 1...

Denial of Service in Apache Commons Compress

GHSA-53x6-4x5p-rrvv CVE-2019-12402 HIGH published almost 7 years ago • updated about 1 month ago

The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially cr...

Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file

GHSA-4265-ccf5-phj5 CVE-2024-26308 MODERATE published over 2 years ago • updated 6 days ago

Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress. This issue affects Apache Commons Compress: from 1.2...

View all 11 advisories

Recent PRs

RSS Feed

build(deps): bump the all-java group across 2 directories with 20 updates

BBMRI-cz/data-quality-framework #593

1.26.1 → 1.28.0 Minor PR

Open about 1 month ago 1 comment

build(deps): bump the all-maven group across 1 directory with 115 updates

beyonai/ByClaw #134

1.24.0 → 1.28.0 Minor PR

Closed about 1 month ago 2 comments

chore(deps): bump the backend-minor-and-patch group across 1 directory with 10 updates

DragisaGitHub/barter-platform #92

1.26.2 → 1.28.0 Minor PR

Open 2 months ago 1 comment

chore(deps): bump the maven-minor-patch group with 165 updates

open-metadata/OpenMetadata #28193

1.26.0 → 1.28.0 Minor PR

Open 2 months ago 1 comment

Bump the maven group across 3 directories with 16 updates

vulcanen/netty #2

1.21 → 1.26.0

Closed 2 months ago 1 comment

chore(deps): bump org.apache.commons:commons-compress from 1.27.1 to 1.28.0

agentscope-ai/agentscope-java #1375

1.27.1 → 1.28.0 Minor PR

Open 2 months ago 2 comments

Bump the dependencies group across 1 directory with 109 updates

BIBLETUM/FlipperAppKekw #6

1.27.1 → 1.28.0 Minor PR

Closed 3 months ago 4 comments

Bump the dependencies group across 1 directory with 52 updates

theit/logging-log4j2 #297

1.27.1 → 1.28.0 Minor PR

Open 3 months ago 1 comment

Bump the dependencies group with 98 updates

theit/logging-log4j2 #296

1.22 → 1.28.0

Closed 3 months ago 1 comment

Bump the maven group across 11 directories with 16 updates

GizzZmo/dubbo #4

1.23.0 → 1.26.0 Minor PR

Closed 3 months ago 1 comment

chore(deps)(deps): bump the all-deps group in /kitehub with 19 updates

VictorAurelius/2026-Kite-Class-Platform #518

1.26.0 → 1.28.0 Minor PR

Closed 3 months ago 3 comments

Bump the dependencies group across 1 directory with 50 updates

ppkarwasz/logging-log4j2 #606

1.27.1 → 1.28.0 Minor PR

Closed 3 months ago 5 comments

Bump the maven group across 8 directories with 9 updates

xxubai/amoro #12

1.23.0 → 1.26.0 Minor PR

Closed 3 months ago 1 comment

chore(deps): bump the maven-dependencies group across 1 directory with 5 updates

dryst0/employee-api #22

1.26.0 → 1.28.0 Minor PR

Closed 4 months ago 1 comment

Bump the dependencies group across 1 directory with 46 updates

apache/logging-log4j2 #4087

1.27.1 → 1.28.0 Minor PR

Open 4 months ago 1 comment

Bump org.apache.commons:commons-compress from 1.27.1 to 1.28.0

apache/karaf #2412

1.27.1 → 1.28.0 Minor PR

Open 4 months ago 1 comment

Bump the dependencies group across 1 directory with 102 updates

LeeroysHub/Flippy-Android #5

1.27.1 → 1.28.0 Minor PR

Closed 5 months ago 1 comment

Bump the dependencies group across 1 directory with 58 updates

apache/logging-log4j2 #4055

1.27.1 → 1.28.0 Minor PR

Closed 5 months ago 1 comment

Bump the dependencies group with 98 updates

LeeroysHub/Flippy-Android #2

1.27.1 → 1.28.0 Minor PR

Closed 5 months ago 1 comment

chore(deps): bump the dependencies group across 1 directory with 15 updates

navikt/syfosmoppgave #254

1.27.1 → 1.28.0 Minor PR

Closed 5 months ago 1 comment

build(deps): bump org.apache.commons:commons-compress from 1.27.1 to 1.28.0

DragonMineZ/dragonminez #25

1.27.1 → 1.28.0 Minor PR

Closed 6 months ago 2 comments

Bump org.apache.commons:commons-compress from 1.25.0 to 1.26.0 in /java

XenoAmess/untar #1

1.25.0 → 1.26.0 Minor PR

Closed 6 months ago 1 comment

chore(deps): bump the dependencies group across 1 directory with 16 updates

navikt/teamsykmelding-mock #314

1.27.1 → 1.28.0 Minor PR

Closed 6 months ago 1 comment

[TSPS-793]: Bump the gradle-other-updates group with 3 updates

DataBiosphere/terra-scientific-pipelines-service #307

1.21 → 1.28.0

Open 6 months ago 10 comments

build(deps): bump the apache-commons group with 11 updates

Biruk-Nigusie/DSpace-dspace-9.1-womezeker #3

1.27.1 → 1.28.0 Minor PR

Closed 6 months ago 1 comment

build(deps): bump the maven-dependencies group across 1 directory with 38 updates

klxiaoniu/QQVersionList #151

1.27.1 → 1.28.0 Minor PR

Closed 6 months ago 1 comment

Bump the dependencies group across 1 directory with 98 updates

flipperdevices/Flipper-Android-App #1075

1.27.1 → 1.28.0 Minor PR

Closed 6 months ago 1 comment

chore(deps): bump org.apache.commons:commons-compress from 1.26.0 to 1.28.0

michaelgiuliano/tech-events-backend #3

1.26.0 → 1.28.0 Minor PR

Closed 6 months ago 1 comment

[TSPS-793]: Bump the gradle-other-updates group with 14 updates

DataBiosphere/terra-scientific-pipelines-service #297

1.21 → 1.28.0

Open 6 months ago 2 comments

Bump org.apache.commons:commons-compress from 1.26.0 to 1.28.0

apache/tomcat-maven-plugin #63

1.26.0 → 1.28.0 Minor PR

Closed 6 months ago 2 comments

chore(deps): bump the dependencies group across 1 directory with 24 updates

navikt/sparenajob #229

1.27.1 → 1.28.0 Minor PR

Closed 6 months ago 1 comment

Bump org.apache.commons:commons-compress from 1.20 to 1.28.0

murggel/cgeo #294

1.20 → 1.28.0

Closed 7 months ago 1 comment

[10.0.x] Bump the dev-dependencies group across 1 directory with 82 updates

cstamas/jetty.project #262

1.23.0 → 1.28.0 Minor PR

Open 7 months ago 2 comments

Bump the gradle group across 1 directory with 4 updates

JakeDot/cgeo #129

1.20 → 1.26.0

Closed 7 months ago 1 comment

Bump org.apache.commons:commons-compress from 1.25.0 to 1.28.0

FuturesHouse/multibody #4

1.25.0 → 1.28.0 Minor PR

Open 7 months ago 1 comment

build(deps): bump the gradle-dependencies group across 1 directory with 29 updates

nais/tokendings #596

1.27.1 → 1.28.0 Minor PR

Closed 7 months ago 1 comment

Bump org.apache.commons:commons-compress from 1.27.1 to 1.28.0

NASA-PDS/registry-legacy-solr #232

1.27.1 → 1.28.0 Minor PR

Open 7 months ago 1 comment

build(deps): bump the all group across 1 directory with 7 updates

mminke/immaru #48

1.27.1 → 1.28.0 Minor PR

Closed 7 months ago 1 comment

Bump the dependencies group with 55 updates

apache/logging-log4j2 #4000

1.27.1 → 1.28.0 Minor PR

Closed 7 months ago 1 comment

Bump the apache-commons group with 10 updates

victtori/dspace9-source #3

1.27.1 → 1.28.0 Minor PR

Closed 8 months ago 1 comment

Bump the dev-dependencies group across 1 directory with 23 updates

NASA-PDS/registry-legacy-solr #224

1.27.1 → 1.28.0 Minor PR

Open 8 months ago 3 comments

Bump the other-dependencies group across 1 directory with 29 updates

kafbat/kafka-ui #1545

1.26.0 → 1.28.0 Minor PR

Closed 8 months ago 1 comment

Bump the other-dependencies group with 32 updates

yeikel/kafka-ui #299

1.26.0 → 1.28.0 Minor PR

Open 8 months ago 2 comments

Bump the dependencies group across 1 directory with 88 updates

flipperdevices/Flipper-Android-App #1061

1.27.1 → 1.28.0 Minor PR

Closed 8 months ago 1 comment

Bump the azure-dependencies group in /provider/search-azure with 33 updates

danielscholl-osdu/search #9

1.21 → 1.28.0

Open 8 months ago 3 comments

Bump the external-dependencies group across 1 directory with 15 updates

ministryofjustice/laa-ccms-caab #554

1.27.1 → 1.28.0 Minor PR

Closed 8 months ago 1 comment

Bump the dev-dependencies group across 1 directory with 22 updates

NASA-PDS/registry-legacy-solr #221

1.27.1 → 1.28.0 Minor PR

Open 8 months ago 2 comments

Bump the apache-commons group with 8 updates

RafaelWurzius/Backend-DSpace #3

1.27.1 → 1.28.0 Minor PR

Closed 8 months ago 1 comment

gradle(deps): bump org.apache.commons:commons-compress from 1.27.1 to 1.28.0

headlesshq/headlessmc #338

1.27.1 → 1.28.0 Minor PR

Open 8 months ago 2 comments

Bump the non-breaking group across 1 directory with 29 updates

ppkarwasz/logging-log4j2 #597

1.27.1 → 1.28.0 Minor PR

Open 9 months ago 1 comment

Package Details

Name:	`org.apache.commons:commons-compress`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/org.apache.commons:commons-compress`
JSON API:	View JSON

Security Advisories

11

Active advisories

HIGH 5

MODERATE 6

View All maven Advisories

Package Information

Description:

Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.

Repository:	https://gitbox.apache.org/repos/asf?p=commons-compress.git
Homepage:	https://commons.apache.org/proper/commons-compress/
Latest Release:	`1.27.1` almost 2 years ago
Dependent Repos:	23,921
Dependent Packages:	2,934
Ranking:	Top 0.0387% by dependent repos Top 0.024% by dependent pkgs

PR Status

Open 391 (52.3%)

Merged 128 (17.1%)

Closed 209 (27.9%)

PR Types

Minor 644 (86.1%)

Patch 6 (0.8%)