{"action":"No fix published. Pin and monitor.","affected":[],"component":"io.takari:commons-compress","cve_ids":["CVE-2018-1324"],"ecosystem":"Maven","epss":0.03656,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-h436-432x-8fvx","id":"tcs_01M5N8ZJNWRRE3MFX1FEFGEJ3F","modified_at":"2024-02-27T18:34:05.707371Z","published_at":"2019-03-14T15:41:12Z","references":["https://osv.dev/vulnerability/GHSA-h436-432x-8fvx","https://nvd.nist.gov/vuln/detail/CVE-2018-1324","https://github.com/apache/commons-compress/commit/2a2f1dc48e22a34ddb72321a4db211da91aa933b","https://arxiv.org/pdf/2306.05534.pdf","https://github.com/advisories/GHSA-h436-432x-8fvx","https://github.com/apache/commons-compress","https://github.com/jensdietrich/xshady-release/tree/main/CVE-2018-1324","https://lists.apache.org/thread.html/1c7b6df6d1c5c8583518a0afa017782924918e4d6acfaf23ed5b2089@%3Cdev.commons.apache.org%3E","https://lists.apache.org/thread.html/b8ef29df0f1d55aa741170748352ae8e425c7b1d286b2f257711a2dd@%3Cdev.creadur.apache.org%3E","https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8@%3Ccommits.pulsar.apache.org%3E","https://lists.apache.org/thread.html/r5532dc8d5456b5151e8c286801e2e5769f5c04118b29c3b5d13ea387@%3Cissues.beam.apache.org%3E"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-h436-432x-8fvx#Maven/io.takari:commons-compress","url":"https://osv.dev/vulnerability/GHSA-h436-432x-8fvx"}],"summary":"Apache Commons Compress vulnerable to denial of service due to infinite loop"}