org.apache.maven.plugins:maven-checkstyle-plugin (2.2) potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (1.4.4)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.apache.maven.plugins:maven-checkstyle-plugin 2.2 Source cves: CVE-2025-67030 Source advisor...

CVE-2018-1000009

Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

EUVD-2022-4348

Malicious code in bioql PyPI...

org.apache.maven.plugins:maven-checkstyle-plugin (2.2) potentially affected by CVE-2022-4244 via org.codehaus.plexus:plexus-utils (1.4.4)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.apache.maven.plugins:maven-checkstyle-plugin 2.2 Source cves: CVE-2022-4244 Source advisory...

org.apache.maven.plugins:maven-checkstyle-plugin (2.2) potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.4.4)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.apache.maven.plugins:maven-checkstyle-plugin 2.2 Source cves: CVE-2022-4245 Source advisory...

XXE vulnerability in Jenkins Checkstyle Plugin

Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

org.apache.maven.plugins:maven-checkstyle-plugin (2.2) potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.4.4)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.apache.maven.plugins:maven-checkstyle-plugin 2.2 Source cves: CVE-2017-1000487 Source...

com.github.krdev.checkstyle:checkstyle-checks (0.0.1), com.qulice:qulice-checkstyle (>=0.1, <=0.2.2) +3 more potentially affected by CVE-2019-9658 via com.puppycrawl.tools:checkstyle (5.4)

com.puppycrawl.tools:checkstyle MAVEN version 5.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - com.github.krdev.checkstyle:checkstyle-checks 0.0.1 - com.qulice:qulice-checkstyle =0.1, =0.1, =2.7...

org.apache.maven.plugins:maven-checkstyle-plugin (2.14) potentially affected by CVE-2019-9658 via com.puppycrawl.tools:checkstyle (5.8)

com.puppycrawl.tools:checkstyle MAVEN version 5.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - org.apache.maven.plugins:maven-checkstyle-plugin 2.14 Source cves: CVE-2019-9658 Source advisory:...

com.thomasjensen.checkstyle.addons:checkstyle-addons-java6 (>=1.3.1, <=4.2.0), org.codehaus.sonar-plugins.java:sonar-checkstyle-plugin (2.2) potentially affected by CVE-2019-9658 via com.puppycrawl.tools:checkstyle (6.1)

com.puppycrawl.tools:checkstyle MAVEN version 6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - com.thomasjensen.checkstyle.addons:checkstyle-addons-java6 =1.3.1, =4.2.0 -...

org.apache.maven.plugins:maven-checkstyle-plugin (2.16), org.opendaylight.yangtools:checkstyle-logging (>=0.8.0-beryllium, <=0.8.4-beryllium-sr4) potentially affected by CVE-2019-9658 via com.puppycrawl.tools:checkstyle (6.2)

com.puppycrawl.tools:checkstyle MAVEN version 6.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - org.apache.maven.plugins:maven-checkstyle-plugin 2.16 - org.opendaylight.yangtools:checkstyle-loggi...

CloudBees Jenkins Checkstyle plugin XML external entity injection vulnerability

CloudBees Jenkins is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . Checkstyle Plugin is used in one of...

CVE-2018-1000009

Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

CVE-2018-1000009

Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

Server side request forgery (ssrf)

Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

CVE-2018-1000009

Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

CVE-2018-1000009

Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

CVE-2018-1000009

CVE-2018-1000009 concerns the Jenkins Checkstyle Plugin (versions 3.49 and earlier) where an XML External Entity (XXE) vulnerability exists in how it parses build-related files. The root cause is processing XML with external entity references, enabling attackers with Jenkins user permissions to e...

CVE-2018-1000009

Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

PT-2018-9200

Name of the Vulnerable Software and Affected Versions: Jenkins Checkstyle Plugin versions 3.49 and earlier Description: The issue allows attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks by...