be.hikage.maven.plugins:maven-xmlmerger-plugin (>=1.0.0, <=1.0.2), com.github.ben-manes:gradle-versions-plugin (0.4) +458 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.4.5)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - be.hikage.maven.plugins:maven-xmlmerger-plugin =1.0.0, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1,...

com.alibaba.citrus.tool:autoconfig-maven-plugin (>=1.1, <=1.2), com.alibaba.citrus.tool:maven-autoconfig-plugin (1.0.10) +46 more potentially affected by CVE-2022-4244 via org.codehaus.plexus:plexus-utils (1.4.7)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.alibaba.citrus.tool:autoconfig-maven-plugin =1.1, =1.2 -...

biz.gabrys.maven:plugin-utils (>=1.0, <=1.4.1), net.sf.buildbox:buildbox-util (1.0.0) +5 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (2.0.0)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - biz.gabrys.maven:plugin-utils =1.0, =1.6.0, =1.6.0, =1.6.1, =1.8.4 -...

ai.libs.thirdparty:interruptible-meka (>=0.1.0, <=0.1.2), ai.mattmann.mnemosyne:cas-crawler (1.11.0) +13792 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (>=1.0.4, <=3.0.23)

org.codehaus.plexus:plexus-utils MAVEN version =1.0.4, =0.1.0, =1.0.0, =2.1.0, =0.0.13, =1.13.3, =1.0.0, =1.2.3 - asia.redact.bracket.properties:pcompiler-maven-plugin 1.0.0 and more Source cves: CVE-2022-4245 Source advisory: MEND:CVE-2022-4245...

ai.libs.thirdparty:interruptible-meka (>=0.1.0, <=0.1.2), ai.mattmann.mnemosyne:cas-crawler (1.11.0) +13792 more potentially affected by CVE-2022-4244 via org.codehaus.plexus:plexus-utils (>=1.0.4, <=3.0.23)

org.codehaus.plexus:plexus-utils MAVEN version =1.0.4, =0.1.0, =1.0.0, =2.1.0, =0.0.13, =1.13.3, =1.0.0, =1.2.3 - asia.redact.bracket.properties:pcompiler-maven-plugin 1.0.0 and more Source cves: CVE-2022-4244 Source advisory: MEND:CVE-2022-4244...

maven bug fix and enhancement update

An update is available for plexus-interpolation, httpcomponents-core, maven-wagon, maven, google-guice, jsoup, jansi, apache-commons-io, apache-commons-lang3, maven-shared-utils, plexus-utils, plexus-classworlds, jakarta-annotations, httpcomponents-client, apache-commons-codec, plexus-cipher,...

Path Traversal

plexus-utils is vulnerable to Path Traversal. An attacker can access arbitrary files and directories stored on the file system through the extractFile function in Expand.java and manipulate files with dot-dot-slash ../ sequences and variations or by using absolute file paths...

Security Bulletin: Publicly disclosed vulnerabilities in Plexus-utils affect IBM Netezza Analytics

Summary Plexus-utils is used by IBM Netezza Analytics. IBM Netezza Analytics has addressed the applicable CVEs Vulnerability Details CVEID:CVE-2017-1000487 DESCRIPTION: Plexus-utils could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of...

new packages: plexus-utils

An update is available for plexus-utils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

de.jiac.micro.platforms.java6:microjiac-java6-platform (3.0), de.jiac.micro.tools:microjiac-midlet-maven-plugin (3.0) +223 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.2)

org.codehaus.plexus:plexus-utils MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - de.jiac.micro.platforms.java6:microjiac-java6-platform 3.0 -...

com.agilepirates:mavenium (0.1), com.github.mmarquee:ui-automation (>=0.0.1, <=0.0.2) +120 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.0.5)

org.codehaus.plexus:plexus-utils MAVEN version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.agilepirates:mavenium 0.1 - com.github.mmarquee:ui-automation =0.0.1, =0.1-alpha-4, =1.2.10...

biz.gabrys.maven:plugin-utils (>=1.0, <=1.4.1), net.sf.buildbox:buildbox-util (1.0.0) +5 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (2.0.0)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - biz.gabrys.maven:plugin-utils =1.0, =1.6.0, =1.6.0, =1.6.1, =1.8.4 -...

com.adobe.adep.maven:content-package-maven-plugin (0.0.12), com.coherentlogic.fred.client:fred-client-webstart-application (>=0.9.3, <=0.9.14) +74 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.4.9)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.adobe.adep.maven:content-package-maven-plugin 0.0.12 -...

org.apache.maven.plugins:maven-checkstyle-plugin (2.2) potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.4.4)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.apache.maven.plugins:maven-checkstyle-plugin 2.2 Source cves: CVE-2017-1000487 Source...

com.buschmais.jqassistant.sonar:jqassistant.sonar.projectrules (>=1.1.3, <=1.1.4), com.buschmais.jqassistant.sonar:jqassistant.sonar.sonarrules (>=1.1.3, <=1.1.4) +369 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.4.1)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.buschmais.jqassistant.sonar:jqassistant.sonar.projectrules =1.1.3, =1.1.3, =1.0.0, =0.2.1,...

asia.redact.bracket.properties:pcompiler-maven-plugin (1.0.0), at.craftworks.tools.maven:jooq-codegen-postgres-maven-plugin (0.0.3) +1167 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.5.15)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - asia.redact.bracket.properties:pcompiler-maven-plugin 1.0.0 -...

org.apache.maven.plugins:maven-dependency-plugin (2.0-alpha-1), org.apache.maven.shared:maven-test-tools (1.0-alpha-1) +7 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.4-alpha-1)

org.codehaus.plexus:plexus-utils MAVEN version 1.4-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.apache.maven.plugins:maven-dependency-plugin 2.0-alpha-1 -...

ch.fortysix:maven-postman-plugin (>=0.1.0, <=0.1.6), com.github.automately:automately-core (>=1.8.6, <=1.8.8) +155 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (2.0.1)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - ch.fortysix:maven-postman-plugin =0.1.0, =1.8.6, =0.0.9, =0.0.9, =0.0.9, =0.0.12, =0.0.9, =0.0....

org.apache.maven.continuum:continuum-api (>=1.1-beta-1, <=1.1-beta-2), org.apache.maven.continuum:continuum-configuration (>=1.1-beta-1, <=1.1-beta-2) +54 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.4.3)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.apache.maven.continuum:continuum-api =1.1-beta-1, =1.1-beta-1, =1.1-beta-1, =1.1-beta-1,...

be.hikage.maven.plugins:maven-xmlmerger-plugin (>=1.0.0, <=1.0.2), com.github.ben-manes:gradle-versions-plugin (0.4) +458 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.4.5)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - be.hikage.maven.plugins:maven-xmlmerger-plugin =1.0.0, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1,...