Cybersecurity staff discovered that the version of Apache Commons Compress, which is used even in the latest Nexus release, is susceptible to vulnerabilities CVE-2024-26308 and CVE-2024-25710. Does anyone know how to correctly update the version of Apache Commons Compress? So far nothing smart com…

How to update Apache Commons Compress in nexus

mpiggott (Matthew Piggott) July 8, 2024, 5:31pm 2

The next release 3.70 will contain an updated version of the library.

Topic		Replies	Views
CVE-2024-26308 in commons-compress-1.21.jar Sonatype Nexus Repository	0	271	May 27, 2024
Important security update for Nexus Repository users Community Announcements nexus-repository	0	145	May 26, 2026
CVE-2022-42889 affect on Nexus OSS Sonatype Nexus Repository nexus-repository	1	1198	October 18, 2022
Urgent: Sonatype Nexus Repository 3.68.1 Released Sonatype Nexus Repository nexus-repository	12	1465	July 17, 2024
Security vulnerable ：CVE-2022-2047 & CVE-2022-2048 Sonatype Nexus Repository nexus-repository	3	1400	March 23, 2023