org.sonatype.nexus.common.components:nexus-cleanup (>=3.89.0-09, <=3.94.2-01), org.sonatype.nexus.common.components:nexus-cleanup-config (>=3.89.0-09, <=3.94.2-01) +14 more potentially affected by CVE-2026-17595 via org.sonatype.nexus.common.components:nexus-selector (>=3.89.0-09, <=3.94.2-01)

org.sonatype.nexus.common.components:nexus-selector MAVEN version =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.94.2-01...

org.sonatype.nexus.common.components:nexus-api-extdirect-common (>=3.89.0-09, <=3.94.2-01), org.sonatype.nexus.common.components:nexus-api-rest-common (>=3.89.0-09, <=3.94.2-01) +51 more potentially affected by CVE-2026-17600 via org.sonatype.nexus.common.components:nexus-security (>=3.89.0-09, <=3.94.2-01)

org.sonatype.nexus.common.components:nexus-security MAVEN version =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.94.2-01 - org.sonatype.nexus.co...

org.sonatype.nexus.common.components:nexus-api-rest-common (>=3.89.0-09, <=3.94.2-01), org.sonatype.nexus.common.components:nexus-audit-plugin (>=3.89.0-09, <=3.94.2-01) +33 more potentially affected by CVE-2026-17603 via org.sonatype.nexus.common.components:nexus-datastore-mybatis (>=3.89.0-09, <=3.94.2-01)

org.sonatype.nexus.common.components:nexus-datastore-mybatis MAVEN version =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.94.2-01 -...

org.sonatype.nexus.assemblies:nexus-base-template (>=3.4.0-02, <=3.18.1-01), org.sonatype.nexus.assemblies:nexus-core-feature (>=3.0.0-03, <=3.18.1-01) +22 more potentially affected by CVE-2019-16530 via org.sonatype.nexus:nexus-repository (>=3.0.0-03, <=3.18.1-01)

org.sonatype.nexus:nexus-repository MAVEN version =3.0.0-03, =3.4.0-02, =3.0.0-03, =3.5.0-02, =3.4.0-02, =3.17.0-01, =0.0.4, =3.17.0-01, =3.1.0-04, =3.1.0-04, =3.11.0-01, =0.0.2, =3.13.0-01, =1.0.4, =1.0.6 and more Source cves: CVE-2019-16530 Source advisory: OSV:GHSA-HMJV-PX3J-933Chttps...

Cross-site Scripting (XSS)

nexus-core is vulnerable to cross-site scripting XSS. The vulnerability exists as the engineForLanguage method did not validate the language, failing to properly restrict the language to Groovy by default...

org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model (2.4.0-04), org.sonatype.nexus.plugins.ldap:ldap-common (2.4.0-04) +11 more potentially affected by CVE-2020-10203 via org.sonatype.nexus:nexus-core (2.4.0-04)

org.sonatype.nexus:nexus-core MAVEN version 2.4.0-04 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model 2.4.0-04 -...

org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model (2.4.0-07), org.sonatype.nexus.plugins.ldap:ldap-common (2.4.0-07) +11 more potentially affected by CVE-2020-10203 via org.sonatype.nexus:nexus-core (2.4.0-07)

org.sonatype.nexus:nexus-core MAVEN version 2.4.0-07 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model 2.4.0-07 -...

org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model (2.4.0-09), org.sonatype.nexus.plugins.ldap:ldap-common (2.4.0-09) +11 more potentially affected by CVE-2020-10203 via org.sonatype.nexus:nexus-core (2.4.0-09)

org.sonatype.nexus:nexus-core MAVEN version 2.4.0-09 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model 2.4.0-09 -...

org.sonatype.nexus.capabilities:nexus-capabilities-model (2.4), org.sonatype.nexus.capabilities:nexus-capabilities-testsuite-helper (2.4) +16 more potentially affected by CVE-2020-10203 via org.sonatype.nexus:nexus-core (2.5.0-01)

org.sonatype.nexus:nexus-core MAVEN version 2.5.0-01 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.capabilities:nexus-capabilities-model 2.4 -...

org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model (2.5.1-01), org.sonatype.nexus.plugins.ldap:ldap-common (2.5.1-01) +13 more potentially affected by CVE-2020-10203 via org.sonatype.nexus:nexus-core (2.5.1-01)

org.sonatype.nexus:nexus-core MAVEN version 2.5.1-01 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model 2.5.1-01 -...

org.eclipse.tycho.nexus:unzip-repository-plugin (0.12.0), org.sonatype.nexus.plugins:nexus-capabilities-model (2.6.0-01) +17 more potentially affected by CVE-2020-10203 via org.sonatype.nexus:nexus-core (2.6.0-01)

org.sonatype.nexus:nexus-core MAVEN version 2.6.0-01 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.eclipse.tycho.nexus:unzip-repository-plugin 0.12.0 -...

org.sonatype.nexus.plugins:nexus-capabilities-model (2.6.0-05), org.sonatype.nexus.plugins:nexus-capabilities-testsuite-helper (2.6.0-05) +16 more potentially affected by CVE-2020-10203 via org.sonatype.nexus:nexus-core (2.6.0-05)

org.sonatype.nexus:nexus-core MAVEN version 2.6.0-05 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.plugins:nexus-capabilities-model 2.6.0-05 -...

org.sonatype.nexus.plugins:nexus-capabilities-model (2.6.2-01), org.sonatype.nexus.plugins:nexus-capabilities-testsuite-helper (2.6.2-01) +16 more potentially affected by CVE-2020-10203 via org.sonatype.nexus:nexus-core (2.6.2-01)

org.sonatype.nexus:nexus-core MAVEN version 2.6.2-01 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.plugins:nexus-capabilities-model 2.6.2-01 -...

org.sonatype.nexus.plugins:nexus-capabilities-model (2.7.0-m1), org.sonatype.nexus.plugins:nexus-capabilities-testsuite-helper (2.7.0-m1) +16 more potentially affected by CVE-2020-10203 via org.sonatype.nexus:nexus-core (2.7.0-m1)

org.sonatype.nexus:nexus-core MAVEN version 2.7.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.plugins:nexus-capabilities-model 2.7.0-m1 -...

org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model (2.4.0-05), org.sonatype.nexus.plugins.ldap:ldap-common (2.4.0-05) +11 more potentially affected by CVE-2020-10203 via org.sonatype.nexus:nexus-core (2.4.0-05)

org.sonatype.nexus:nexus-core MAVEN version 2.4.0-05 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model 2.4.0-05 -...

org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model (2.5.0-02), org.sonatype.nexus.plugins.ldap:ldap-common (2.5.0-02) +13 more potentially affected by CVE-2020-10203 via org.sonatype.nexus:nexus-core (2.5.0-02)

org.sonatype.nexus:nexus-core MAVEN version 2.5.0-02 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model 2.5.0-02 -...

org.sonatype.nexus.plugins:nexus-capabilities-model (2.6.1-01), org.sonatype.nexus.plugins:nexus-capabilities-testsuite-helper (2.6.1-01) +16 more potentially affected by CVE-2020-10203 via org.sonatype.nexus:nexus-core (2.6.1-01)

org.sonatype.nexus:nexus-core MAVEN version 2.6.1-01 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.plugins:nexus-capabilities-model 2.6.1-01 -...

org.sonatype.nexus.plugins:nexus-capabilities-model (2.6.3-01), org.sonatype.nexus.plugins:nexus-capabilities-testsuite-helper (2.6.3-01) +16 more potentially affected by CVE-2020-10203 via org.sonatype.nexus:nexus-core (2.6.3-01)

org.sonatype.nexus:nexus-core MAVEN version 2.6.3-01 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.plugins:nexus-capabilities-model 2.6.3-01 -...

org.sonatype.nexus.assemblies:nexus-base-template (>=3.4.0-02, <=3.21.1-01), org.sonatype.nexus.assemblies:nexus-core-feature (>=3.0.0-03, <=3.21.1-01) potentially affected by CVE-2020-10203 via org.sonatype.nexus:nexus-core (>=3.0.0-03, <=3.21.1-01)

org.sonatype.nexus:nexus-core MAVEN version =3.0.0-03, =3.4.0-02, =3.0.0-03, =3.21.1-01 Source cves: CVE-2020-10203 Source advisory: OSV:GHSA-3944-787C-F852...

org.sonatype.nexus.assemblies:nexus-base-template (>=3.4.0-02, <=3.21.1-01), org.sonatype.nexus.assemblies:nexus-core-feature (>=3.0.0-03, <=3.21.1-01) potentially affected by CVE-2020-10203 via org.sonatype.nexus:nexus-core (>=3.0.0-03, <=3.21.1-01)

org.sonatype.nexus:nexus-core MAVEN version =3.0.0-03, =3.4.0-02, =3.0.0-03, =3.21.1-01 Source cves: CVE-2020-10203 Source advisory: GHSA-3944-787C-F852...