CLSA-2026-1777038119 plexus-utils: Fix of CVE-2025-67030

CVE-2025-67030 fix zip slip via canonical path check in Expand...

Amazon Linux 2023 : plexus-utils, plexus-utils-javadoc (ALAS2023-2026-1545)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1545 advisory. Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus- utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute...

CVE-2025-67030 affecting package plexus-utils for versions less than 3.3.0-5

CVE-2025-67030 affecting package plexus-utils for versions less than 3.3.0-5. A patched version of the package is available...

CVE-2025-67030 vulnerabilities

Vulnerabilities for packages: maven-stage0, clojure-tools, maven-ecosystems-test, gradle-stage0, kafka-fips, apache-camel-karavan-devmode, druid, maven, akhq, confluent-kafka, dependency-track, confluent-kafka-jre-bcfips, leiningen, kafka, wso2is, dependency-track-apiserver, gradle...