ai.libs.thirdparty:interruptible-meka (>=0.1.0, <=0.1.2), ai.tripl:arc-jupyter_2.11 (>=0.0.13, <=0.0.14) +6672 more potentially affected by CVE-2022-4244 via org.codehaus.plexus:plexus-utils (>=3.0, <=3.0.23)

org.codehaus.plexus:plexus-utils MAVEN version =3.0, =0.1.0, =0.0.13, =1.13.3, =1.1.1, =1.0.0, =1.0, =0.0.1, =3.0.1, =0.3, =1.0, =3.0.0, =1.0, =1.2.2 and more Source cves: CVE-2022-4244 Source advisory: GHSA-G6PH-X5WF-G337...

com.google.code.maven-svn-wagon:maven-svn-wagon (>=1.1, <=1.4), jp.pizzafactory.maven:s3-maven-wagon (3.3) +42 more potentially affected by CVE-2022-4244 via org.codehaus.plexus:plexus-utils (1.4.2)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.google.code.maven-svn-wagon:maven-svn-wagon =1.1, =3.2, =1.1.1, =1.0-alpha-2, =1.0-beta-3,...

ai.rev.speechtotext:revai-java-sdk-speechtotext (>=1.0.0, <=1.4.0), ai.rev:revai-java-sdk (>=2.1.0, <=2.5.0) +564 more potentially affected by CVE-2022-4244 via org.codehaus.plexus:plexus-utils (1.0.4)

org.codehaus.plexus:plexus-utils MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - ai.rev.speechtotext:revai-java-sdk-speechtotext =1.0.0, =2.1.0, =1.0, =0.1-1, =1.0.0, =1.0.0,...

ai.libs.thirdparty:interruptible-meka (>=0.1.0, <=0.1.2), ai.mattmann.mnemosyne:cas-crawler (1.11.0) +13792 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (>=1.0.4, <=3.0.23)

org.codehaus.plexus:plexus-utils MAVEN version =1.0.4, =0.1.0, =1.0.0, =2.1.0, =0.0.13, =1.13.3, =1.0.0, =1.2.3 - asia.redact.bracket.properties:pcompiler-maven-plugin 1.0.0 and more Source cves: CVE-2022-4245 Source advisory: MEND:CVE-2022-4245...

ai.libs.thirdparty:interruptible-meka (>=0.1.0, <=0.1.2), ai.mattmann.mnemosyne:cas-crawler (1.11.0) +13792 more potentially affected by CVE-2022-4244 via org.codehaus.plexus:plexus-utils (>=1.0.4, <=3.0.23)

org.codehaus.plexus:plexus-utils MAVEN version =1.0.4, =0.1.0, =1.0.0, =2.1.0, =0.0.13, =1.13.3, =1.0.0, =1.2.3 - asia.redact.bracket.properties:pcompiler-maven-plugin 1.0.0 and more Source cves: CVE-2022-4244 Source advisory: MEND:CVE-2022-4244...

maven bug fix and enhancement update

An update is available for plexus-interpolation, httpcomponents-core, maven-wagon, maven, google-guice, jsoup, jansi, apache-commons-io, apache-commons-lang3, maven-shared-utils, plexus-utils, plexus-classworlds, jakarta-annotations, httpcomponents-client, apache-commons-codec, plexus-cipher,...

Path Traversal

plexus-utils is vulnerable to Path Traversal. An attacker can access arbitrary files and directories stored on the file system through the extractFile function in Expand.java and manipulate files with dot-dot-slash ../ sequences and variations or by using absolute file paths...

Security Bulletin: Publicly disclosed vulnerabilities in Plexus-utils affect IBM Netezza Analytics

Summary Plexus-utils is used by IBM Netezza Analytics. IBM Netezza Analytics has addressed the applicable CVEs Vulnerability Details CVEID:CVE-2017-1000487 DESCRIPTION: Plexus-utils could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of...

new packages: plexus-utils

An update is available for plexus-utils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

com.googlecode.apparat:apparat-maven-plugin (1.0.rc4), org.apache.maven:apache-maven (3.0-beta-1) +33 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (2.0.3)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.googlecode.apparat:apparat-maven-plugin 1.0.rc4 - org.apache.maven:apache-maven 3.0-beta-1 ...

biz.gabrys.forks.com.samaxes.maven:minify-maven-plugin (1.6.3), ch.rasc:embeddedtc-maven-plugin (>=1.0, <=1.6) +1499 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (2.0.6)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - biz.gabrys.forks.com.samaxes.maven:minify-maven-plugin 1.6.3 - ch.rasc:embeddedtc-maven-plugin...

de.jiac.micro.platforms.java6:microjiac-java6-platform (3.0), de.jiac.micro.tools:microjiac-midlet-maven-plugin (3.0) +223 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.2)

org.codehaus.plexus:plexus-utils MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - de.jiac.micro.platforms.java6:microjiac-java6-platform 3.0 -...

ch.fortysix:maven-postman-plugin (>=0.1.0, <=0.1.6), com.github.automately:automately-core (>=1.8.6, <=1.8.8) +155 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (2.0.1)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - ch.fortysix:maven-postman-plugin =0.1.0, =1.8.6, =0.0.9, =0.0.9, =0.0.9, =0.0.12, =0.0.9, =0.0....

co.actioniq.thirdparty.com.twitter:scrooge-generator_2.10 (>=3.17.0-fda97c3c64755e87643b4700e3b9ac136f24e79d, <=3.17.0-4232bc888d6b09f0bf41930956b39dd8f398d96f), co.actioniq.thirdparty.com.twitter:scrooge-linter_2.10 (>=3.17.0-fda97c3c64755e87643b4700e3b9ac136f24e79d, <=3.17.0-4232bc888d6b09f0bf41930956b39dd8f398d96f) +87 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.5.4)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - co.actioniq.thirdparty.com.twitter:scrooge-generator2.10...

com.anasoft.os:m2st-doxia-macros (2.0), com.soebes.maven.plugins.dmg:doxygen-maven-plugin (1.0.1) +54 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.5.7)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.anasoft.os:m2st-doxia-macros 2.0 - com.soebes.maven.plugins.dmg:doxygen-maven-plugin 1.0.1 ...

org.apache.continuum:continuum-api (>=1.3.4, <=1.4.2), org.apache.continuum:continuum-artifact-manager (1.4.2) +30 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.5.11)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.apache.continuum:continuum-api =1.3.4, =1.3.4, =1.3.4, =1.3.4, =1.4.1, =1.3.4, =1.3.4,...

ai.mattmann.mnemosyne:cas-crawler (1.11.0), ai.mattmann.mnemosyne:cas-filemgr (1.11.0) +1190 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.5.6)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - ai.mattmann.mnemosyne:cas-crawler 1.11.0 - ai.mattmann.mnemosyne:cas-filemgr 1.11.0 -...

biz.gabrys.maven:plugin-utils (>=1.0, <=1.4.1), net.sf.buildbox:buildbox-util (1.0.0) +5 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (2.0.0)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - biz.gabrys.maven:plugin-utils =1.0, =1.6.0, =1.6.0, =1.6.1, =1.8.4 -...

com.google.code.maven-svn-wagon:maven-svn-wagon (>=1.1, <=1.4), jp.pizzafactory.maven:s3-maven-wagon (3.3) +42 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.4.2)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.google.code.maven-svn-wagon:maven-svn-wagon =1.1, =3.2, =1.1.1, =1.0-alpha-2, =1.0-beta-3,...

OS Command Injection in Plexus-utils

Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings...