biz.gabrys.forks.com.samaxes.maven:minify-maven-plugin (1.6.3), ch.rasc:embeddedtc-maven-plugin (>=1.0, <=1.6) +1499 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (2.0.6)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - biz.gabrys.forks.com.samaxes.maven:minify-maven-plugin 1.6.3 - ch.rasc:embeddedtc-maven-plugin...

br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1), com.alipay.sofa:sofa-version-maven-plugin (>=1.0.0, <=1.0.1) +137 more potentially affected by CVE-2025-4949 via org.eclipse.jgit:org.eclipse.jgit (3.7.1.201504261725-r)

org.eclipse.jgit:org.eclipse.jgit MAVEN version 3.7.1.201504261725-r is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jgit:org.eclipse.jgit and may be impacted: - br.com.ingenieux.jenkins.plugins:codecommit-url-helper 0.0.1 -...

SUSE SLED15: apache-commons-lang3 / apache-commons-lang3-javadoc / bcel / etc (SUSE-SU-SUSE-RU-2024:3971-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-SUSE-RU-2024:3971-1 advisory. xalan-j2 was updated from version 2.7.2 to 2.7.3: - Security issues fixed: CVE-2022-34169: Fixed...

com.realrunners:scalate-maven-plugin_2.13 (0.0.4), com.stephenn:scalate-maven-plugin_2.12 (>=0.0.1, <=0.0.2) +15 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (2.0.2)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.realrunners:scalate-maven-plugin2.13 0.0.4 - com.stephenn:scalate-maven-plugin2.12 =0.0.1,...

org.ow2.util.maven:maven-deploymentplan-plugin (>=1.0.34, <=1.0.37), org.ow2.util.maven:maven-jbuilding-plugin (>=1.0.1, <=1.0.37) +7 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.4.8)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.ow2.util.maven:maven-deploymentplan-plugin =1.0.34, =1.0.1, =1.0.31, =1.0.13, =1.0.13,...

com.google.code.maven-svn-wagon:maven-svn-wagon (>=1.1, <=1.4), jp.pizzafactory.maven:s3-maven-wagon (3.3) +42 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.4.2)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.google.code.maven-svn-wagon:maven-svn-wagon =1.1, =3.2, =1.1.1, =1.0-alpha-2, =1.0-beta-3,...

art.cutils:cutils (>=1.0.0, <=1.2.3), at.bestsolution:bindex-maven-plugin (>=1.0.0, <=3.0.0) +933 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (2.0.4)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - art.cutils:cutils =1.0.0, =1.0.0, =2.1.9, =2.1.9, =1.0.0, =1.0, =1.0, =1.0.0, =0.2.0, =0.2.7-rc...

au.net.ocean.maven.plugin:maven-plugin-tools (1.1), ch.hortis.sonar:sonar-maven-plugin (>=0.2, <=1.0.2) +402 more potentially affected by CVE-2022-4244 via org.codehaus.plexus:plexus-utils (1.1)

org.codehaus.plexus:plexus-utils MAVEN version 1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - au.net.ocean.maven.plugin:maven-plugin-tools 1.1 - ch.hortis.sonar:sonar-maven-plugin =0.2, =0.5....

com.google.code.maven-play-plugin:play-maven-plugin (1.0.0-beta6), com.googlecode.maven-download-plugin:download-maven-plugin (>=1.2.0, <=1.2.1) +11 more potentially affected by CVE-2023-37460 via org.codehaus.plexus:plexus-archiver (2.4.1)

org.codehaus.plexus:plexus-archiver MAVEN version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.google.code.maven-play-plugin:play-maven-plugin 1.0.0-beta6 -...

com.adobe.adep.maven:content-package-maven-plugin (0.0.12), com.day.jcr.vault:content-package-maven-plugin (>=0.0.13, <=0.0.19) +63 more potentially affected by CVE-2023-37460 via org.codehaus.plexus:plexus-archiver (1.0-alpha-9)

org.codehaus.plexus:plexus-archiver MAVEN version 1.0-alpha-9 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.adobe.adep.maven:content-package-maven-plugin 0.0.12 -...

au.net.causal.maven.plugins:docker-image-archive-maven-plugin (1.0), com.google.code.play2-maven-plugin:play2-maven-plugin (1.0.0-alpha9) +3 more potentially affected by CVE-2023-37460 via org.codehaus.plexus:plexus-archiver (2.8.2)

org.codehaus.plexus:plexus-archiver MAVEN version 2.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - au.net.causal.maven.plugins:docker-image-archive-maven-plugin 1.0 -...

com.atolcd.alfresco:amp-maven-plugin (>=1.0.0, <=1.1.9), com.btmatthews.maven.plugins:crx-maven-plugin (1.2.0) +127 more potentially affected by CVE-2023-37460 via org.codehaus.plexus:plexus-archiver (2.2)

org.codehaus.plexus:plexus-archiver MAVEN version 2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.atolcd.alfresco:amp-maven-plugin =1.0.0, =1.4.0, =1.4.0, =1.4.0, =1.0.0-m4, =1.0.0-m4,...

com.jayway.maven.plugins.android.generation1.plugins:maven-par-plugin (>=1.0.1, <=1.0.2), org.apache.directory.studio:maven-studio-plugin (1.0.0) +19 more potentially affected by CVE-2023-37460 via org.codehaus.plexus:plexus-archiver (1.0-alpha-10)

org.codehaus.plexus:plexus-archiver MAVEN version 1.0-alpha-10 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.jayway.maven.plugins.android.generation1.plugins:maven-par-plugin =1.0.1,...

aero.albers.osmbse:mdzip-process-sources-maven-plugin (0.0.1), aero.albers.osmbse:mdzip-validate-maven-plugin (0.0.1) +4598 more potentially affected by CVE-2022-29599 via org.apache.maven.shared:maven-shared-utils (>=0.1, <=3.2.1)

org.apache.maven.shared:maven-shared-utils MAVEN version =0.1, =1.0.0, =2.0.2.release, =2.0.0.release, =1.0.0, =1.0.0, =4.1.0, =4.0.0-beta.1, =3.5.6, =3.5.6, =1.0, =3.3 - au.net.causal.maven.plugins:browserbox-maven-plugin 1.0 and more Source cves: CVE-2022-29599 Source advisory: MEND:CVE-2022-29...

com.google.code.tycho-eclipserun-plugin:tycho-eclipserun-plugin (0.13.0), com.googlecode.maven-download-plugin:maven-download-plugin (>=1.0.0, <=1.1.0) +75 more potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (1.2)

org.codehaus.plexus:plexus-archiver MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.google.code.tycho-eclipserun-plugin:tycho-eclipserun-plugin 0.13.0 -...

biz.aqute.bnd:biz.aqute.bnd.maven (>=4.3.0, <=5.3.0), com.aerse.maven:apt-maven-plugin (>=1.19, <=1.20) +356 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.5.5)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - biz.aqute.bnd:biz.aqute.bnd.maven =4.3.0, =1.19, =1.0, =2.0.0, =1.4.3, =1.4.3, =1.11.0, =1.11.0...

[SECURITY] Fedora 32 Update: eclipse-m2e-core-1.16.1-1.fc32

The goal of the m2ec project is to provide a first-class Apache Maven suppo rt in the Eclipse IDE, making it easier to edit Maven's pom.xml, run a build f rom the IDE and much more. For Java developers, the very tight integration with JDT greatly simplifies the consumption of Java artifacts eithe...