maven · io.github.1tchy.java9modular.org.apache.commons:commons-compress

• CVE-2019-12402