org.apache.maven.plugins:maven-ear-plugin (2.10.1) potentially affected by CVE-2023-37460 via org.codehaus.plexus:plexus-archiver (2.10.3)

org.codehaus.plexus:plexus-archiver MAVEN version 2.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - org.apache.maven.plugins:maven-ear-plugin 2.10.1 Source cves: CVE-2023-37460 Source...

com.sun.enterprise:hk2-maven (>=0.2, <=1.6.9), com.sun.enterprise:hk2-maven-plugin (>=0.2, <=1.6.9) +27 more potentially affected by CVE-2023-37460 via org.codehaus.plexus:plexus-archiver (1.0-alpha-4)

org.codehaus.plexus:plexus-archiver MAVEN version 1.0-alpha-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.sun.enterprise:hk2-maven =0.2, =0.2, =0.0.1, =1.46, =3.2, =3.2, =3.2, =1.0-rc4,...

org.apache.maven.plugins:maven-ear-plugin (2.10.1) potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (2.10.3)

org.codehaus.plexus:plexus-archiver MAVEN version 2.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - org.apache.maven.plugins:maven-ear-plugin 2.10.1 Source cves: CVE-2018-1002200 Source...