Apache Apache Commons Codec
2 CVEs affecting Apache Apache Commons Codec. Latest disclosed: 2026-11-09. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-124077 | | 2026-11-09 | The GitIdentifiers class in Apache Commons Codec did not reject NUL bytes in tree entry names. Because Git uses a NUL byte to mark the end of each entry name i… | |
CVE-2026-119078 | | 2026-11-09 | Apache Commons Codec's Blake3 class documented the output of its doFinalize methods as depending on any previously finalized bytes, so that consecutive calls w… |