org.apache.camel:camel-shiro (2.5.0), org.apache.shiro.samples:samples-aspectj (1.0.0-incubating) +29 more potentially affected by CVE-2026-49268 via org.apache.shiro:shiro-core (1.0.0-incubating)

org.apache.shiro:shiro-core MAVEN version 1.0.0-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-core and may be impacted: - org.apache.camel:camel-shiro 2.5.0 - org.apache.shiro.samples:samples-aspectj 1.0.0-incubating...

de.huxhorn.lilith:de.huxhorn.lilith (0.9.35), de.huxhorn.lilith:de.huxhorn.lilith.data.access.protobuf (0.9.35) +16 more potentially affected by CVE-2022-3171 via com.google.protobuf:protobuf-java (2.0.3)

com.google.protobuf:protobuf-java MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.protobuf:protobuf-java and may be impacted: - de.huxhorn.lilith:de.huxhorn.lilith 0.9.35 -...

Central Security Project: OS Command Injection in Nexus Repository Manager 2.x

Maven artifact groupId: org.sonatype.nexus.plugins artifactId: nexus-yum-repository-plugin version: 2.14.9-01 Vulnerability Vulnerability Description The Nexus Yum Repository Plugin is vulnerable to Remote Code Execution. All instances using CommandLineExecutor.java with user-supplied data is...