Known moderate severity security vulnerability detected in org.apache.commons:commons-compress < 1.18 defined in pom.xml. pom.xml update suggested: org.apache.commons:commons-compress ~> 1.18.