{"action":"Upgrade org.apache.commons:commons-compress to 1.24.0 or later.","affected":[{"fixed":"1.24.0","introduced":"1.22"}],"component":"org.apache.commons:commons-compress","cve_ids":["CVE-2023-42503"],"ecosystem":"Maven","epss":0.00601,"exploited":false,"fixed_versions":["1.24.0"],"ghsa_id":"GHSA-cgwf-w82q-5jrr","id":"tcs_01M5N8SDTM65MPD6Z62RBXC762","modified_at":"2026-09-10T03:49:58.139651298Z","published_at":"2023-09-14T09:30:28Z","references":["https://osv.dev/vulnerability/GHSA-cgwf-w82q-5jrr","https://nvd.nist.gov/vuln/detail/CVE-2023-42503","https://github.com/apache/commons-compress/commit/aae38bfb820159ae7a0b792e779571f6a46b3889","https://github.com/apache/commons-compress","https://lists.apache.org/thread/5xwcyr600mn074vgxq92tjssrchmc93c","https://security.netapp.com/advisory/ntap-20231020-0003"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-cgwf-w82q-5jrr","url":"https://osv.dev/vulnerability/GHSA-cgwf-w82q-5jrr"}],"summary":"Apache Commons Compress denial of service vulnerability"}