biz.gabrys.forks.com.samaxes.maven:minify-maven-plugin (1.6.3), ch.rasc:embeddedtc-maven-plugin (>=1.0, <=1.6) +1499 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (2.0.6)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - biz.gabrys.forks.com.samaxes.maven:minify-maven-plugin 1.6.3 - ch.rasc:embeddedtc-maven-plugin...

br.com.digix:editordedocumento (>=2.0.0, <=2.4.0), com.bugvm:bugvm-gradle (>=1.1.0, <=1.1.5) +188 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (2.0.7)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - br.com.digix:editordedocumento =2.0.0, =1.1.0, =1.0.1, =0.0.1, =2.0.2, =1.0.0, =1.0.0, =0.7.2,...

com.anaptecs.jeaf.generator:jeaf-generator-maven-plugin (>=1.5.2, <=1.6.40), com.anaptecs.jeaf.generator:jeaf-generator-test-message-constants (>=1.5.13, <=1.6.40) +146 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (2.1)

org.codehaus.plexus:plexus-utils MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.anaptecs.jeaf.generator:jeaf-generator-maven-plugin =1.5.2, =1.5.13, =4.1.1, =3.1.12, =1.0,...

ai.libs.thirdparty:interruptible-meka (>=0.1.0, <=0.1.2), at.bestsolution:at.bestsolution.maven.publisher (>=1.0.0, <=1.1.2) +2797 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (>=3.0, <=3.0.15)

org.codehaus.plexus:plexus-utils MAVEN version =3.0, =0.1.0, =1.0.0, =0.0.1, =1.0, =0.1.0, =3.1.0, =3.3.0, =3.1.0, =3.1.0, =4.3.0, =4.0.0, =5.3.0 and more Source cves: CVE-2017-1000487 Source advisory: OSV:GHSA-8VHQ-QQ4P-GRQ3...

ch.fortysix:maven-postman-plugin (>=0.1.0, <=0.1.6), com.github.automately:automately-core (>=1.8.6, <=1.8.8) +155 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (2.0.1)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - ch.fortysix:maven-postman-plugin =0.1.0, =1.8.6, =0.0.9, =0.0.9, =0.0.9, =0.0.12, =0.0.9, =0.0....

com.realrunners:scalate-maven-plugin_2.13 (0.0.4), com.stephenn:scalate-maven-plugin_2.12 (>=0.0.1, <=0.0.2) +15 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (2.0.2)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.realrunners:scalate-maven-plugin2.13 0.0.4 - com.stephenn:scalate-maven-plugin2.12 =0.0.1,...

br.com.ingenieux.launchify:launchify-core (0.0.1), br.com.ingenieux.launchify:launchify-hashdot (0.0.1) +559 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (2.0.5)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - br.com.ingenieux.launchify:launchify-core 0.0.1 - br.com.ingenieux.launchify:launchify-hashdot...

art.cutils:cutils (>=1.0.0, <=1.2.3), at.bestsolution:bindex-maven-plugin (>=1.0.0, <=3.0.0) +933 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (2.0.4)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - art.cutils:cutils =1.0.0, =1.0.0, =2.1.9, =2.1.9, =1.0.0, =1.0, =1.0, =1.0.0, =0.2.0, =0.2.7-rc...

ai.rev.speechtotext:revai-java-sdk-speechtotext (>=1.0.0, <=1.4.0), ai.rev:revai-java-sdk (>=2.1.0, <=2.5.0) +564 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.0.4)

org.codehaus.plexus:plexus-utils MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - ai.rev.speechtotext:revai-java-sdk-speechtotext =1.0.0, =2.1.0, =1.0, =0.1-1, =1.0.0, =1.0.0,...

com.agilepirates:mavenium (0.1), com.github.mmarquee:ui-automation (>=0.0.1, <=0.0.2) +120 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.0.5)

org.codehaus.plexus:plexus-utils MAVEN version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.agilepirates:mavenium 0.1 - com.github.mmarquee:ui-automation =0.0.1, =0.1-alpha-4, =1.2.10...

GHSA-8VHQ-QQ4P-GRQ3 OS Command Injection in Plexus-utils

Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings...

de.jiac.micro.platforms.java6:microjiac-java6-platform (3.0), de.jiac.micro.tools:microjiac-midlet-maven-plugin (3.0) +223 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.2)

org.codehaus.plexus:plexus-utils MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - de.jiac.micro.platforms.java6:microjiac-java6-platform 3.0 -...

au.net.ocean.maven.plugin:maven-plugin-tools (1.1), ch.hortis.sonar:sonar-maven-plugin (>=0.2, <=1.0.2) +402 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.1)

org.codehaus.plexus:plexus-utils MAVEN version 1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - au.net.ocean.maven.plugin:maven-plugin-tools 1.1 - ch.hortis.sonar:sonar-maven-plugin =0.2, =0.5....

org.apache.geronimo.devtools:maven-eclipsepde-plugin (>=1.0, <=1.2), org.apache.maven.plugins:maven-release-plugin (>=2.0-beta-5, <=2.0-beta-7) +45 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.3)

org.codehaus.plexus:plexus-utils MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.apache.geronimo.devtools:maven-eclipsepde-plugin =1.0, =2.0-beta-5, =1.0-alpha-1, =1.0-beta-1...

com.adobe.adep.maven:content-package-maven-plugin (0.0.12), com.coherentlogic.fred.client:fred-client-webstart-application (>=0.9.3, <=0.9.14) +74 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.4.9)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.adobe.adep.maven:content-package-maven-plugin 0.0.12 -...

com.browserstack:browserstack-java-sdk (>=1.0.1, <=1.0.6), com.eclipsesource.tycho.karaf.bridge:kar-packager (>=0.2.0, <=0.6.0) +11 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.5.10)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.browserstack:browserstack-java-sdk =1.0.1, =0.2.0, =0.9, =0.1, =0.2.1, =0.6.1, =2.2, =1.16...

org.apache.maven.continuum:continuum-api (>=1.1-beta-1, <=1.1-beta-2), org.apache.maven.continuum:continuum-configuration (>=1.1-beta-1, <=1.1-beta-2) +54 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.4.3)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.apache.maven.continuum:continuum-api =1.1-beta-1, =1.1-beta-1, =1.1-beta-1, =1.1-beta-1,...

org.apache.maven.plugins:maven-checkstyle-plugin (2.2) potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.4.4)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.apache.maven.plugins:maven-checkstyle-plugin 2.2 Source cves: CVE-2017-1000487 Source...

com.atlassian.maven.plugins:maven-clover2-plugin (>=2.3.1, <=2.4.2), com.intel.analytics.bigdl.core.dist:all (>=0.4.0, <=0.13.0) +192 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.4.6)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.atlassian.maven.plugins:maven-clover2-plugin =2.3.1, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0...

com.alibaba.citrus.tool:autoconfig-maven-plugin (>=1.1, <=1.2), com.alibaba.citrus.tool:maven-autoconfig-plugin (1.0.10) +46 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.4.7)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.alibaba.citrus.tool:autoconfig-maven-plugin =1.1, =1.2 -...