Apache Software Foundation Apache Commons VFS

• CVE-2025-27553 High 7.5 Apache Commons VFS: Possible path traversal issue when using NameScope.DESCENDENT 1.4%
• CVE-2025-30474 Medium 5.0 Apache Commons VFS: Failing to find an FTP file can reveal the URI's password in an error message 0.9%