Commons Io (Apache) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 86 known versions, newest CVE from 2024-10-03. Vendor: Apache.

CVEs of Commons Io

• CVE-2024-47554 - CVSS 4.3 (medium), 2024-10-03: Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU…
• CVE-2021-29425 - CVSS 6.5 (medium), 2021-04-13: In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result…