更新commons-compress 依赖版本,避免漏洞扫描出来

[litian-98]

依赖项 maven:org.apache.commons:commons-compress:1.25.0 vulnerable

升级到 1.26.0

CVE-2024-25710，分数: 8.1

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0.

Users are recommended to upgrade to version 1.26.0 which fixes the issue.

阅读更多: https://www.mend.io/vulnerability-database/CVE-2024-25710?utm_source=JetBrains

CVE-2024-26308，分数: 5.5

Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26.

Users are recommended to upgrade to version 1.26, which fixes the issue.

阅读更多: https://www.mend.io/vulnerability-database/CVE-2024-26308?utm_source=JetBrains

结果由 Mend.io 提供技术支持