org.apache.maven.plugins:maven-assembly-plugin (2.5.5), org.apache.maven.plugins:maven-ejb-plugin (2.5.1) potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (2.10.2)

org.codehaus.plexus:plexus-archiver MAVEN version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - org.apache.maven.plugins:maven-assembly-plugin 2.5.5 -...

com.jayway.maven.plugins.android.generation2:android-maven-plugin (>=3.0.0-alpha-11, <=3.4.1), com.jayway.maven.plugins.android.generation2:maven-android-plugin (>=3.0.0-alpha-9, <=3.0.0-alpha-11) +16 more potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (2.0.1)

org.codehaus.plexus:plexus-archiver MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.jayway.maven.plugins.android.generation2:android-maven-plugin =3.0.0-alpha-11,...

io.chris-kipp:mill-giter8_mill0.10_2.13 (>=0.1.0, <=0.2.1), org.codehaus.mojo:appassembler-maven-plugin (>=1.9, <=1.10) +13 more potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (2.7.1)

org.codehaus.plexus:plexus-archiver MAVEN version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - io.chris-kipp:mill-giter8mill0.102.13 =0.1.0, =1.9, =0.7.1, =0.7.1, =0.7.2, =0.12.0-m3,...

com.google.code.maven-play-plugin:play-maven-plugin (1.0.0-beta6), com.googlecode.maven-download-plugin:download-maven-plugin (>=1.2.0, <=1.2.1) +11 more potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (2.4.1)

org.codehaus.plexus:plexus-archiver MAVEN version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.google.code.maven-play-plugin:play-maven-plugin 1.0.0-beta6 -...

ch.cmbntr:modulizer-plugin (>=0.9.0, <=0.9.9), ch.epfl.scala:maven-bloop_2.10 (>=ccbc95eb, <=121807cc) +76 more potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (2.1)

org.codehaus.plexus:plexus-archiver MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - ch.cmbntr:modulizer-plugin =0.9.0, =ccbc95eb, =0.0.0-1-f5da8eb0, =1.0, =0.1.0, =0.1.0, =1.2...

au.net.causal.maven.plugins:boxdb-maven-plugin (>=1.0, <=3.3), au.net.causal.maven.plugins:browserbox-maven-plugin (1.0) +572 more potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (>=3.0, <=3.5)

org.codehaus.plexus:plexus-archiver MAVEN version =3.0, =1.0, =0.7.8, =0.6.0, =0.6.0, =0.6.0, =1.4.14, =1.2.1, =1.20, =0.0.3, =0.0.21, =0.0.3, =0.0.3, =0.0.3, =0.0.16 and more Source cves: CVE-2018-1002200 Source advisory: OSV:GHSA-HCXQ-X77Q-3469...

com.github.marschall:eclipse-maven-plugin (>=2.11.1, <=2.12.1), net.kindleit:maven-gae-plugin (>=0.9.3, <=0.9.4) potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (2.11)

org.codehaus.plexus:plexus-archiver MAVEN version 2.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.github.marschall:eclipse-maven-plugin =2.11.1, =0.9.3, =0.9.4 Source cves:...

au.net.causal.maven.plugins:docker-image-archive-maven-plugin (1.0), com.google.code.play2-maven-plugin:play2-maven-plugin (1.0.0-alpha9) +3 more potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (2.8.2)

org.codehaus.plexus:plexus-archiver MAVEN version 2.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - au.net.causal.maven.plugins:docker-image-archive-maven-plugin 1.0 -...

org.apache.geronimo.devtools:maven-eclipsepde-plugin (>=1.0, <=1.2), org.apache.maven.plugins:maven-assembly-plugin (2.2-beta-1) +12 more potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (1.0-alpha-8)

org.codehaus.plexus:plexus-archiver MAVEN version 1.0-alpha-8 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - org.apache.geronimo.devtools:maven-eclipsepde-plugin =1.0, =2.0-alpha-6,...

com.atolcd.alfresco:amp-maven-plugin (>=1.0.0, <=1.1.9), com.btmatthews.maven.plugins:crx-maven-plugin (1.2.0) +127 more potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (2.2)

org.codehaus.plexus:plexus-archiver MAVEN version 2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.atolcd.alfresco:amp-maven-plugin =1.0.0, =1.4.0, =1.4.0, =1.4.0, =1.0.0-m4, =1.0.0-m4,...

com.github.albfernandez.richfaces.cdk:richfaces-cdk-maven-plugin (4.6.0.ayg), com.github.catchitcozucan:core (>=1.0, <=2.26) +29 more potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (1.0-alpha-11)

org.codehaus.plexus:plexus-archiver MAVEN version 1.0-alpha-11 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.github.albfernandez.richfaces.cdk:richfaces-cdk-maven-plugin 4.6.0.ayg -...

org.apache.maven.plugins:maven-javadoc-plugin (2.10.1) potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (2.5)

org.codehaus.plexus:plexus-archiver MAVEN version 2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - org.apache.maven.plugins:maven-javadoc-plugin 2.10.1 Source cves: CVE-2018-1002200 Source...

com.agilejava.docbkx:docbkx-maven-base (>=2.0.6, <=2.0.17), com.agilejava.docbkx:docbkx-maven-plugin (>=2.0.6, <=2.0.17) +21 more potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (1.0-alpha-5)

org.codehaus.plexus:plexus-archiver MAVEN version 1.0-alpha-5 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.agilejava.docbkx:docbkx-maven-base =2.0.6, =2.0.6, =1.0-alpha-4, =1.0-alpha-4,...

GHSA-HCXQ-X77Q-3469 Improper Limitation of a Pathname to a Restricted Directory in plexus-archiver

plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

ch.rasc:embeddedtc-maven-plugin (>=1.16, <=1.17), com.ea.orbit:orbit-async-maven-plugin (>=0.2.3, <=0.4.2) +42 more potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (2.8.1)

org.codehaus.plexus:plexus-archiver MAVEN version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - ch.rasc:embeddedtc-maven-plugin =1.16, =0.2.3, =1.0.0, =4.0-beta2, =4.0-rc1, =1.0.0, =0.3...

com.jayway.maven.plugins.android.generation1.plugins:maven-par-plugin (>=1.0.1, <=1.0.2), org.apache.directory.studio:maven-studio-plugin (1.0.0) +19 more potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (1.0-alpha-10)

org.codehaus.plexus:plexus-archiver MAVEN version 1.0-alpha-10 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.jayway.maven.plugins.android.generation1.plugins:maven-par-plugin =1.0.1,...

org.eclipse.tycho.extras:target-platform-validation-plugin (0.23.0), org.eclipse.tycho.extras:tycho-buildtimestamp-jgit (0.23.0) +20 more potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (2.10.1)

org.codehaus.plexus:plexus-archiver MAVEN version 2.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - org.eclipse.tycho.extras:target-platform-validation-plugin 0.23.0 -...

com.ovh.ws:jsonizer-maven-plugin (>=1.2.2, <=1.2.3) potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (2.0.2)

org.codehaus.plexus:plexus-archiver MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.ovh.ws:jsonizer-maven-plugin =1.2.2, =1.2.3 Source cves: CVE-2018-1002200 Source...

at.bestsolution:maven-osgi-package-plugin (0.0.1), ch.rasc:embeddedtc-maven-plugin (>=1.18, <=1.19) +59 more potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (2.9.1)

org.codehaus.plexus:plexus-archiver MAVEN version 2.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - at.bestsolution:maven-osgi-package-plugin 0.0.1 - ch.rasc:embeddedtc-maven-plugin =1.18,...

com.agifac.deploy:replacer-maven-plugin (1.0.0), com.choncms:chon-package-plugin (>=1.1, <=1.2) +86 more potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (1.0-alpha-12)

org.codehaus.plexus:plexus-archiver MAVEN version 1.0-alpha-12 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.agifac.deploy:replacer-maven-plugin 1.0.0 - com.choncms:chon-package-plugin...