Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2025/01/31 5:34 p.m.28 views

PMD Designer's release key passphrase (GPG) available on Maven Central in cleartext

Summary While rebuilding PMD Designer for Reproducible Builds and digging into issues, I found out that passphrase for gpg.keyname=0xD0BF1D737C9A1C22 is included in jar published to Maven Central. Details See...

9.3CVSS6.3AI score0.00315EPSS
SaveExploits0References8Affected Software3
Rows per page
Query Builder