Apache Software Foundation Apache Commons IO

• CVE-2024-47554 Medium 4.3 Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader 1.3%
• CVE-2021-29425 Medium 6.5 Possible limited path traversal vulnerabily in Apache Commons IO 10.5%