CVE-2021-26291

CVE-2021-26291: Apache Maven could allow a remote attacker to bypass security restrictions by default non-SSL (http) repository references. Affected IBM/Bundled deployments cite this vulnerability and provide remediation paths, including upgrading Maven-driven components to versions that include ...

CVE-2013-0253

CVE-2013-0253 concerns Apache Maven 3.0.4 when used with Maven Wagon 2.1, where SSL certificate checks are disabled by default. This configuration enables remote attackers to spoof servers via a man-in-the-middle (MITM) attack. The vulnerability details specify the affected components as Maven Wa...