Known vulnerabilities in maven-surefire-plugin

Vendor: SUSE
Software: maven-surefire-plugin
Software CPE: cpe:2.3:o:suse:maven-surefire-plugin:*:*:*:*:*:suse_linux:*:*
Website: https://www.suse.com/
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting maven-surefire-plugin maven-surefire-plugin is affected by 5 known vulnerabilities: 1 high, 3 medium, 1 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU147210 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-78254		 CWE-22 Medium
No
No
 3.5.6-150200.3.9.23.3 07.09.2026 SB2026090711
SB2026100518
SB2026101330
and 3 more
#VU114346 - Command injection
CVE-2025-7962		 CWE-77 Medium
No
No
 3.5.6-150200.3.9.23.3 21.08.2025 SB2025082145
SB2025082146
SB2025082147
and 58 more
#VU86800 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-4218		 CWE-611 Low
No
No
 2.22.2-150200.3.9.9.1 26.02.2024 SB2024022642
SB2024030105
SB2024032906
and 11 more
#VU54856 - Resource exhaustion
CVE-2021-36374		 CWE-400 Medium
No
No
 3.5.6-150200.3.9.23.3 14.07.2021 SB2021071409
SB2021072011
SB2021101927
and 44 more
#VU51511 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-13936		 CWE-94 High
No
No
 3.5.2-150200.3.9.20.2 16.03.2021 SB2021031618
SB2021072614
SB2022011911
and 45 more