com.sun.enterprise:hk2-maven (>=0.2, <=1.6.9), com.sun.enterprise:hk2-maven-plugin (>=0.2, <=1.6.9) +27 more potentially affected by CVE-2023-37460 via org.codehaus.plexus:plexus-archiver (1.0-alpha-4)

org.codehaus.plexus:plexus-archiver MAVEN version 1.0-alpha-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.sun.enterprise:hk2-maven =0.2, =0.2, =0.0.1, =1.46, =3.2, =3.2, =3.2, =1.0-rc4,...

net.sourceforge.maven-taglib:maven-taglib-plugin (>=2.3, <=2.3.1), org.apache.maven.plugins:maven-assembly-plugin (2.1) +4 more potentially affected by CVE-2023-37460 via org.codehaus.plexus:plexus-archiver (1.0-alpha-6)

org.codehaus.plexus:plexus-archiver MAVEN version 1.0-alpha-6 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - net.sourceforge.maven-taglib:maven-taglib-plugin =2.3, =2.0.5, =1.0-alpha-3,...

com.google.code.maven-play-plugin:play-maven-plugin (1.0.0-beta6), com.googlecode.maven-download-plugin:download-maven-plugin (>=1.2.0, <=1.2.1) +11 more potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (2.4.1)

org.codehaus.plexus:plexus-archiver MAVEN version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.google.code.maven-play-plugin:play-maven-plugin 1.0.0-beta6 -...