com.google.code.maven-svn-wagon:maven-svn-wagon (>=1.1, <=1.4), jp.pizzafactory.maven:s3-maven-wagon (3.3) +42 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (1.4.2)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.google.code.maven-svn-wagon:maven-svn-wagon =1.1, =3.2, =1.1.1, =1.0-alpha-2, =1.0-beta-3,...

MAL-2025-36258 Malicious code in test-mlw2-slope-wagon (npm)

The package test-mlw2-slope-wagon was found to contain malicious code...

Malicious code in test-mlw2-slope-wagon (npm)

The package test-mlw2-slope-wagon was found to contain malicious code...

Fedora: Security Advisory for maven-wagon (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: maven-wagon-3.5.3-7.fc40

Maven Wagon is a transport abstraction that is used in Maven's artifact and repository handling code. Currently wagon has the following providers: File HTTP FTP SSH/SCP WebDAV SCM in progress...

com.google.code.maven-svn-wagon:maven-svn-wagon (>=1.1, <=1.4), jp.pizzafactory.maven:s3-maven-wagon (3.3) +42 more potentially affected by CVE-2022-4244 via org.codehaus.plexus:plexus-utils (1.4.2)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.google.code.maven-svn-wagon:maven-svn-wagon =1.1, =3.2, =1.1.1, =1.0-alpha-2, =1.0-beta-3,...

com.google.code.maven-svn-wagon:maven-svn-wagon (>=1.1, <=1.4), jp.pizzafactory.maven:s3-maven-wagon (3.3) +42 more potentially affected by CVE-2022-4245 via org.codehaus.plexus:plexus-utils (1.4.2)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.google.code.maven-svn-wagon:maven-svn-wagon =1.1, =3.2, =1.1.1, =1.0-alpha-2, =1.0-beta-3,...

maven bug fix and enhancement update

An update is available for plexus-interpolation, httpcomponents-core, maven-wagon, maven, google-guice, jsoup, jansi, apache-commons-io, apache-commons-lang3, maven-shared-utils, plexus-utils, plexus-classworlds, jakarta-annotations, httpcomponents-client, apache-commons-codec, plexus-cipher,...

SUSE CVE-2009-4007

Unspecified vulnerability in the NormaliseTrainConsist function in src/traincmd.cpp in OpenTTD before 0.7.5-RC1 allows remote attackers to cause a denial of service daemon crash via certain game actions involving a wagon and a dual-headed engine...

maven:maven-artifact-plugin (>=1.4, <=1.6), maven:maven-site-plugin (>=1.5.1, <=1.6) +5 more potentially affected by CVE-2021-37533 via commons-net:commons-net (1.1.0)

commons-net:commons-net MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on commons-net:commons-net and may be impacted: - maven:maven-artifact-plugin =1.4, =1.5.1, =1.0-alpha-2, =2.9.0-b03, =0.0.1, =20040825.211642, =20040825.214656...

new packages: maven-wagon

An update is available for maven-wagon. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

com.byclosure.maven.plugins:bundler-maven-plugin (>=0.0.1, <=0.0.3), de.saumya.mojo:jruby-mains (>=0.1.0, <=0.3.1) +10 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.19)

org.jruby:jruby-stdlib MAVEN version 1.7.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.byclosure.maven.plugins:bundler-maven-plugin =0.0.1, =0.1.0, =0.2, =0.1.3, =0.1.6, =0.2.0, =0.2.0, =0.2.1 Sour...

com.byclosure.maven.plugins:bundler-maven-plugin (>=0.0.1, <=0.0.3), de.saumya.mojo:jruby-mains (>=0.1.0, <=0.3.1) +10 more potentially affected by CVE-2018-1000074 via org.jruby:jruby-stdlib (1.7.19)

org.jruby:jruby-stdlib MAVEN version 1.7.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.byclosure.maven.plugins:bundler-maven-plugin =0.0.1, =0.1.0, =0.2, =0.1.3, =0.1.6, =0.2.0, =0.2.0, =0.2.1 Sour...

com.byclosure.maven.plugins:bundler-maven-plugin (>=0.0.1, <=0.0.3), de.saumya.mojo:jruby-mains (>=0.1.0, <=0.3.1) +10 more potentially affected by CVE-2018-1000077 via org.jruby:jruby-stdlib (1.7.19)

org.jruby:jruby-stdlib MAVEN version 1.7.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.byclosure.maven.plugins:bundler-maven-plugin =0.0.1, =0.1.0, =0.2, =0.1.3, =0.1.6, =0.2.0, =0.2.0, =0.2.1 Sour...

com.google.code.maven-svn-wagon:maven-svn-wagon (>=1.1, <=1.4), jp.pizzafactory.maven:s3-maven-wagon (3.3) +42 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.4.2)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.google.code.maven-svn-wagon:maven-svn-wagon =1.1, =3.2, =1.1.1, =1.0-alpha-2, =1.0-beta-3,...

maven:3.6 security and enhancement update

An update is available for apache-commons-io, atinject, jsr-305, maven-shared-utils, plexus-cipher, aopalliance, plexus-classworlds, guava, apache-commons-cli, plexus-containers, plexus-sec-dispatcher, httpcomponents-client, maven-resolver, apache-commons-lang3, plexus-interpolation, sisu,...

io.github.htools:htools (>=0.26, <=0.27), io.github.k3nn:k3nn (0.01) +11 more potentially affected by CVE-2021-26291 via org.apache.maven:maven-compat (2.2.1)

org.apache.maven:maven-compat MAVEN version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.maven:maven-compat and may be impacted: - io.github.htools:htools =0.26, =0.0.19, =0.0.19, =0.0.19, =0.0.15, =1.0-beta-5, =1.5, =1.16 Source...

3.6 bug fix and enhancement update

An update is available for apache-commons-io, atinject, jsr-305, maven-shared-utils, plexus-cipher, aopalliance, plexus-classworlds, guava, apache-commons-cli, plexus-containers, plexus-sec-dispatcher, httpcomponents-client, maven-resolver, apache-commons-lang3, plexus-interpolation, sisu,...

RHEL 6 : jenkins (RHSA-2013:0700)

An updated jenkins package that fixes one security issue is now available for Red Hat OpenShift Enterprise 1.1.3. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2013-0253

The default configuration of Apache Maven 3.0.4, when using Maven Wagon 2.1, disables SSL certificate checks, which allows remote attackers to spoof servers via a man-in-the-middle MITM attack...