org.bndly.common:bndly-maven-plugin (1.0.6) potentially affected by CVE-2023-37460 via org.codehaus.plexus:plexus-archiver (2.6.2)

org.codehaus.plexus:plexus-archiver MAVEN version 2.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - org.bndly.common:bndly-maven-plugin 1.0.6 Source cves: CVE-2023-37460 Source advisory:...

org.bndly.common:bndly-maven-plugin (1.0.6) potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (2.6.2)

org.codehaus.plexus:plexus-archiver MAVEN version 2.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - org.bndly.common:bndly-maven-plugin 1.0.6 Source cves: CVE-2018-1002200 Source advisory:...