Path traversal in Codehaus plexus-utils - CVE-2025-67030

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU132316

Path traversal in Codehaus plexus-utils - CVE-2025-67030

Published: May 26, 2026


Vulnerability identifier: #VU132316
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-67030
CWE-ID: CWE-22
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to write arbitrary files.

The vulnerability exists due to path traversal in the extractFile function when extracting archive entries with traversal sequences or absolute paths. A remote attacker can supply a specially crafted archive to write arbitrary files.

If a written file is later used as an executable or configuration file, this may lead to code execution in the context of the current working user.


Affected software

Codehaus plexus-utils
SUSE Linux Enterprise Server 15 SP6
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for IBM z Systems
Anolis OS
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Development Tools Module
openSUSE Leap
Optim
Rational Developer for i
MongoDB Enterprise Advanced with IBM
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
plexus-build-api-javadoc
plexus-build-api
jsr-305-javadoc
jsr-305
isorelax
isorelax-javadoc
jsch-javadoc
jsch
sisu-mojos-javadoc
sisu-mojos
sisu-plexus
sisu-javadoc
sisu-inject
maven-cal10n-plugin
cal10n-javadoc
cal10n
maven-artifact-transfer
maven-artifact-transfer-javadoc
plexus-languages
plexus-languages-javadoc
java_cup-javadoc
java_cup-manual
java_cup
jboss-interceptors-1.2-api
jboss-interceptors-1.2-api-javadoc
plexus-i18n-javadoc
plexus-i18n
plexus-component-factories-pom
plexus-bsh-factory-javadoc
plexus-bsh-factory
plexus-ant-factory-javadoc
plexus-ant-factory
plexus-resources-javadoc
plexus-resources
plexus-component-api
plexus-component-api-javadoc
plexus-interactivity
plexus-interactivity-api
plexus-interactivity-javadoc
plexus-interactivity-jline
jtidy
jtidy-javadoc
ant-contrib
ant-contrib-javadoc
munge-maven-plugin-javadoc
munge-maven-plugin
aopalliance
aopalliance-javadoc
maven-artifact-resolver-javadoc
maven-artifact-resolver
geronimo-annotation-javadoc
geronimo-annotation
maven-resolver-javadoc
maven-resolver-transport-http
maven-resolver-transport-file
maven-resolver-transport-classpath
maven-resolver-test-util
maven-resolver-spi
maven-resolver-transport-wagon
maven-resolver-api
maven-resolver-connector-basic
maven-resolver
maven-resolver-util
maven-resolver-impl
geronimo-jpa-javadoc
geronimo-jpa
geronimo-jms-javadoc
geronimo-jms
jzlib
jzlib-demo
jzlib-javadoc
jdom-demo
jdom-javadoc
jdom
jaxen
jaxen-demo
jaxen-javadoc
maven-script-interpreter-javadoc
maven-script-interpreter
glassfish-legal
maven-shared-incremental-javadoc
maven-shared-incremental
felix-osgi-foundation-javadoc
felix-osgi-foundation
jdependency-javadoc
jdependency
os-maven-plugin-javadoc
os-maven-plugin
plexus-velocity-javadoc
plexus-velocity
cdi-api
cdi-api-javadoc
spec-version-maven-plugin-javadoc
spec-version-maven-plugin
apache-commons-logging-javadoc
apache-commons-logging
glassfish-annotation-api
glassfish-annotation-api-javadoc
log4j12
log4j12-javadoc
xml-commons-resolver-javadoc
xml-commons-resolver
plexus-components-pom
apache-commons-exec
apache-commons-exec-javadoc
hamcrest
hamcrest-javadoc
hamcrest-demo
hamcrest-core
apache-commons-jxpath
apache-commons-jxpath-javadoc
felix-osgi-core-javadoc
felix-osgi-core
felix-osgi-compendium-javadoc
felix-osgi-compendium
maven-enforcer
maven-enforcer-api
maven-enforcer-javadoc
maven-enforcer-plugin
maven-enforcer-rules
xml-commons-apis-javadoc
xml-commons-apis
xml-commons-apis-manual
apache-commons-cli-javadoc
apache-commons-cli
plexus-sec-dispatcher
plexus-sec-dispatcher-javadoc
maven-remote-resources-plugin
maven-remote-resources-plugin-javadoc
javamail
javamail-javadoc
objectweb-pom
regexp
regexp-javadoc
exec-maven-plugin-javadoc
exec-maven-plugin
jflex
jflex-javadoc
powermock-api-easymock
powermock-api-mockito
powermock-api-support
powermock-common
powermock-core
powermock-javadoc
powermock-junit4
powermock-reflect
powermock-testng
maven-verifier
plexus-cli-javadoc
plexus-cli
maven-verifier-javadoc
xmlunit
xmlunit-javadoc
geronimo-parent-poms
plexus-containers-container-default
plexus-containers-javadoc
plexus-containers
plexus-containers-component-annotations
plexus-containers-component-javadoc
plexus-containers-component-metadata
maven-doxia-sitetools-javadoc
maven-doxia-sitetools
jansi-native
jansi-native-javadoc
maven-doxia-module-latex
maven-doxia-module-docbook-simple
maven-doxia-module-rtf
maven-doxia-module-twiki
maven-doxia-module-xdoc
maven-doxia-module-xhtml
maven-doxia-modules
maven-doxia-sink-api
maven-doxia-test-docs
maven-doxia-tests
maven-doxia
maven-doxia-core
maven-doxia-module-fml
maven-doxia-javadoc
maven-doxia-logging-api
maven-doxia-module-apt
maven-doxia-module-confluence
plexus-cipher-javadoc
plexus-cipher
velocity-manual
velocity-demo
velocity
velocity-javadoc
log4j-over-slf4j
jcl-over-slf4j
slf4j-sources
jul-to-slf4j
slf4j-manual
slf4j-log4j12
slf4j-jdk14
slf4j-jcl
slf4j
slf4j-javadoc
slf4j-ext
maven-dependency-analyzer-javadoc
maven-dependency-analyzer
xz-java
xz-java-javadoc
maven-antrun-plugin-javadoc
maven-antrun-plugin
modello
modello-javadoc
maven-plugin-build-helper-javadoc
maven-plugin-build-helper
apache-commons-beanutils-javadoc
apache-commons-beanutils
felix-utils
felix-utils-javadoc
ant-apache-log4j
ant-xz
ant-testutil
ant-swing
ant
ant-antlr
ant-manual
ant-lib
ant-apache-bcel
ant-apache-bsf
ant-junit
ant-apache-oro
ant-apache-resolver
ant-jdepend
ant-javamail
ant-javadoc
ant-commons-net
ant-commons-logging
ant-apache-xalan2
ant-jmf
ant-jsch
ant-apache-regexp
maven-invoker-plugin-javadoc
maven-invoker-plugin
mockito
mockito-javadoc
fusesource-pom
apache-commons-codec
apache-commons-codec-javadoc
jsoup-javadoc
jsoup
byaccj
hawtjni-javadoc
hawtjni
maven-hawtjni-plugin
hawtjni-runtime
jansi
jansi-javadoc
apache-commons-compress-javadoc
apache-commons-compress
plexus-interpolation
plexus-interpolation-javadoc
atinject
atinject-tck
atinject-javadoc
beust-jcommander-javadoc
beust-jcommander
qdox-javadoc
qdox
jdom2-javadoc
jdom2
jakarta-oro-javadoc
jakarta-oro
bsh-javadoc
bsh-manual
bsh
maven2-javadoc
maven-plugin-registry
maven-settings
maven-artifact-manager
maven-artifact
maven-plugin-descriptor
maven-monitor
maven-model
maven-project
maven-toolchain
maven-profile
maven-invoker
maven-invoker-javadoc
glassfish-jsp-api-javadoc
glassfish-jsp-api
apache-ivy-javadoc
apache-ivy
bsf-javadoc
bsf
maven-install-plugin-javadoc
maven-install-plugin
plexus-classworlds-javadoc
plexus-classworlds
objenesis-javadoc
objenesis
apache-commons-io
apache-commons-io-javadoc
apache-commons-lang-javadoc
apache-commons-lang
javacc-maven-plugin-javadoc
javacc-maven-plugin
xalan-j2
xalan-j2-manual
xalan-j2-demo
xalan-j2-javadoc
xalan-j2-xsltc
antlr-C++
antlr-manual
antlr-tool
antlr-javadoc
plexus-compiler-extras
plexus-compiler-javadoc
plexus-compiler
plexus-compiler-pom
jdepend-javadoc
jdepend-demo
jdepend
xerces-j2
xerces-j2-demo
xerces-j2-javadoc
jline
jline-javadoc
apache-resource-bundles
maven-surefire-plugin
maven-surefire-javadoc
maven-surefire
maven-surefire-report-parser
maven-surefire-report-plugin
maven-failsafe-plugin
maven-surefire-provider-junit
maven-surefire-provider-testng
plexus-io
plexus-io-javadoc
maven-reporting-impl-javadoc
maven-reporting-impl
maven-file-management-javadoc
maven-shared-io-javadoc
maven-shared-io
maven-clean-plugin
maven-clean-plugin-javadoc
maven-file-management
xmvn-subst
xmvn-resolve
xmvn-bisect
xmvn-connector-aether
xmvn-connector-ivy
xmvn-tools-pom
xmvn-core
xmvn-install
xmvn-api
xmvn
xmvn-javadoc
xmvn-minimal
xmvn-mojo
xmvn-parent-pom
glassfish-el-javadoc
glassfish-el
glassfish-el-api
maven-common-artifact-filters-javadoc
maven-source-plugin-javadoc
maven-source-plugin
maven-common-artifact-filters
maven-dependency-plugin-javadoc
maven-dependency-plugin
maven-dependency-tree
maven-dependency-tree-javadoc
maven-reporting-api-javadoc
maven-reporting-api
maven-wagon-ftp
maven-jar-plugin
maven-wagon-providers
maven-wagon-provider-api
maven-wagon-javadoc
maven-wagon-http-shared
maven-wagon-http-lightweight
maven-wagon-http
maven-wagon-file
maven-wagon
maven-jar-plugin-javadoc
maven-assembly-plugin
maven-resources-plugin
maven-resources-plugin-javadoc
maven-assembly-plugin-javadoc
maven-shade-plugin
maven-shade-plugin-javadoc
plexus-utils
plexus-utils-javadoc
glassfish-servlet-api-javadoc
glassfish-servlet-api
maven-filtering
maven-filtering-javadoc
jakarta-commons-httpclient
jakarta-commons-httpclient-demo
jakarta-commons-httpclient-javadoc
jakarta-commons-httpclient-manual
maven-archiver
maven-archiver-javadoc
maven-shared-utils
maven-shared-utils-javadoc
apache-commons-collections-testframework
apache-commons-collections-javadoc
apache-commons-collections
cglib-javadoc
cglib
plexus-utils (Red Hat package)
maven-test-tools
maven-plugin-testing-tools
maven-plugin-testing-javadoc
maven-plugin-testing-harness
maven-plugin-testing
maven-plugin-bundle
maven-plugin-bundle-javadoc
aqute-bndlib
bnd-maven-plugin
aqute-bnd-javadoc
aqute-bnd
maven-plugin-tools-generators
maven-script-beanshell
maven-script-ant
maven-script
maven-plugin-tools-model
maven-plugin-tools-javadocs
maven-plugin-tools-javadoc
maven-plugin-tools-java
maven-plugin-annotations
maven-plugin-tools-beanshell
maven-plugin-tools-api
maven-plugin-tools-ant
maven-plugin-plugin
maven-plugin-tools
maven-plugin-tools-annotations
easymock-javadoc
easymock
maven-javadoc
maven-lib
maven
plexus-archiver
plexus-archiver-javadoc
apache-commons-net-javadoc
apache-commons-net
maven-compiler-plugin
maven-compiler-plugin-javadoc
apache-commons-lang3-javadoc
apache-commons-lang3
assertj-core-javadoc
assertj-core
javassist-javadoc
javassist
google-guice
guice-extensions
guice-bom
guice-assistedinject
guice-parent
guice-grapher
google-guice-javadoc
guice-jmx
guice-servlet
guice-testlib
guice-throwingproviders
guice-jndi
guice-multibindings
httpcomponents-core
httpcomponents-core-javadoc
felix-parent
httpcomponents-client-javadoc
httpcomponents-client
httpcomponents-client-cache
xbean-javadoc
xbean
jvnet-parent
junit
junit-javadoc
junit-manual
plexus-pom
ivy-local
javapackages-filesystem
javapackages-local
javapackages-tools
maven-local
python3-javapackages
osgi-compendium
osgi-compendium-javadoc
osgi-core
osgi-core-javadoc
osgi-annotation
osgi-annotation-javadoc
bcel-javadoc
bcel
objectweb-asm-javadoc
objectweb-asm
testng
testng-javadoc
javacc-javadoc
javacc-manual
javacc-demo
javacc
sonatype-oss-parent
glassfish-master-pom
sonatype-plugins-parent
httpcomponents-project
apache-parent
guava20
guava20-javadoc
guava20-testlib
jboss-parent
maven-shared
spice-parent
maven-parent
maven-plugins-pom
weld-parent
forge-parent
mojo-parent
apache-commons-parent
Bamboo Data Center
Red Hat Integration Camel Extensions for Quarkus

How to mitigate CVE-2025-67030

Install security update from vendor's website.

Codehaus plexus-utils - addressed in versions 3.6.1, 4.0.3
Optim - update to 2.0.0
Rational Developer for i - update to 9.9.0.4
Bamboo Data Center - addressed in versions 10.2.19, 12.1.7
Red Hat Integration Camel Extensions for Quarkus - addressed in versions p, 3.33.2
plexus-build-api-javadoc - update to 0.0.7-20
plexus-build-api - update to 0.0.7-20
jsr-305-javadoc - update to 0-0.22.20130910svn
jsr-305 - update to 0-0.22.20130910svn
isorelax - update to 0-0.23.release20050331
isorelax-javadoc - update to 0-0.23.release20050331
jsch-javadoc - update to 0.1.54-6
jsch - update to 0.1.54-6
sisu-mojos-javadoc - update to 0.3.1-8
sisu-mojos - update to 0.3.1-8
sisu-plexus - update to 0.3.3-7
sisu-javadoc - update to 0.3.3-7
sisu-inject - update to 0.3.3-7
maven-cal10n-plugin - update to 0.8.1-7
cal10n-javadoc - update to 0.8.1-7
cal10n - update to 0.8.1-7
maven-artifact-transfer - update to 0.9.0-4
maven-artifact-transfer-javadoc - update to 0.9.0-4
plexus-languages - update to 0.9.10-3
plexus-languages-javadoc - update to 0.9.10-3
java_cup-javadoc - update to 0.11b-8
java_cup-manual - update to 0.11b-8
java_cup - update to 0.11b-8
jboss-interceptors-1.2-api - update to 1.0.0-8
jboss-interceptors-1.2-api-javadoc - update to 1.0.0-8
plexus-i18n-javadoc - update to 1.0-0.11.b10.4
plexus-i18n - update to 1.0-0.11.b10.4
plexus-component-factories-pom - update to 1.0-0.15.alpha11
plexus-bsh-factory-javadoc - update to 1.0-0.19.a7
plexus-bsh-factory - update to 1.0-0.19.a7
plexus-ant-factory-javadoc - update to 1.0-0.20.a2.2
plexus-ant-factory - update to 1.0-0.20.a2.2
plexus-resources-javadoc - update to 1.0-0.23.a7
plexus-resources - update to 1.0-0.23.a7
plexus-component-api - update to 1.0-0.24.alpha15
plexus-component-api-javadoc - update to 1.0-0.24.alpha15
plexus-interactivity - update to 1.0-0.27.alpha6
plexus-interactivity-api - update to 1.0-0.27.alpha6
plexus-interactivity-javadoc - update to 1.0-0.27.alpha6
plexus-interactivity-jline - update to 1.0-0.27.alpha6
jtidy - update to 1.0-0.28.20100930svn1125
jtidy-javadoc - update to 1.0-0.28.20100930svn1125
ant-contrib - update to 1.0-0.32.b3
ant-contrib-javadoc - update to 1.0-0.32.b3
munge-maven-plugin-javadoc - update to 1.0-11
munge-maven-plugin - update to 1.0-11
aopalliance - update to 1.0-17
aopalliance-javadoc - update to 1.0-17
maven-artifact-resolver-javadoc - update to 1.0-18
maven-artifact-resolver - update to 1.0-18
geronimo-annotation-javadoc - update to 1.0-23
geronimo-annotation - update to 1.0-23
maven-resolver-javadoc - update to 1.1.1-2
maven-resolver-transport-http - update to 1.1.1-2
maven-resolver-transport-file - update to 1.1.1-2
maven-resolver-transport-classpath - update to 1.1.1-2
maven-resolver-test-util - update to 1.1.1-2
maven-resolver-spi - update to 1.1.1-2
maven-resolver-transport-wagon - update to 1.1.1-2
maven-resolver-api - update to 1.1.1-2
maven-resolver-connector-basic - update to 1.1.1-2
maven-resolver - update to 1.1.1-2
maven-resolver-util - update to 1.1.1-2
maven-resolver-impl - update to 1.1.1-2
geronimo-jpa-javadoc - update to 1.1.1-21
geronimo-jpa - update to 1.1.1-21
geronimo-jms-javadoc - update to 1.1.1-25
geronimo-jms - update to 1.1.1-25
jzlib - update to 1.1.3-8
jzlib-demo - update to 1.1.3-8
jzlib-javadoc - update to 1.1.3-8
jdom-demo - update to 1.1.3-17
jdom-javadoc - update to 1.1.3-17
jdom - update to 1.1.3-17
jaxen - update to 1.1.6-18
jaxen-demo - update to 1.1.6-18
jaxen-javadoc - update to 1.1.6-18
maven-script-interpreter-javadoc - update to 1.1-11
maven-script-interpreter - update to 1.1-11
glassfish-legal - update to 1.1-11
maven-shared-incremental-javadoc - update to 1.1-14
maven-shared-incremental - update to 1.1-14
felix-osgi-foundation-javadoc - update to 1.2.0-23
felix-osgi-foundation - update to 1.2.0-23
jdependency-javadoc - update to 1.2-2
jdependency - update to 1.2-2
os-maven-plugin-javadoc - update to 1.2.3-9
os-maven-plugin - update to 1.2.3-9
plexus-velocity-javadoc - update to 1.2-4
plexus-velocity - update to 1.2-4
cdi-api - update to 1.2-8
cdi-api-javadoc - update to 1.2-8
spec-version-maven-plugin-javadoc - update to 1.2-11
spec-version-maven-plugin - update to 1.2-11
apache-commons-logging-javadoc - update to 1.2-13
apache-commons-logging - update to 1.2-13
glassfish-annotation-api - update to 1.2-13
glassfish-annotation-api-javadoc - update to 1.2-13
log4j12 - update to 1.2.17-22
log4j12-javadoc - update to 1.2.17-22
xml-commons-resolver-javadoc - update to 1.2-26
xml-commons-resolver - update to 1.2-26
plexus-components-pom - update to 1.3.1-10
apache-commons-exec - update to 1.3-8.0.1
apache-commons-exec-javadoc - update to 1.3-8.0.1
hamcrest - update to 1.3-23
hamcrest-javadoc - update to 1.3-23
hamcrest-demo - update to 1.3-23
hamcrest-core - update to 1.3-23
apache-commons-jxpath - update to 1.3-29
apache-commons-jxpath-javadoc - update to 1.3-29
felix-osgi-core-javadoc - update to 1.4.0-23
felix-osgi-core - update to 1.4.0-23
felix-osgi-compendium-javadoc - update to 1.4.0-26
felix-osgi-compendium - update to 1.4.0-26
maven-enforcer - update to 1.4.1-8
maven-enforcer-api - update to 1.4.1-8
maven-enforcer-javadoc - update to 1.4.1-8
maven-enforcer-plugin - update to 1.4.1-8
maven-enforcer-rules - update to 1.4.1-8
xml-commons-apis-javadoc - update to 1.4.01-25
xml-commons-apis - update to 1.4.01-25
xml-commons-apis-manual - update to 1.4.01-25
apache-commons-cli-javadoc - update to 1.4-4
apache-commons-cli - update to 1.4-4
plexus-sec-dispatcher - update to 1.4-26
plexus-sec-dispatcher-javadoc - update to 1.4-26
maven-remote-resources-plugin - update to 1.5-2
maven-remote-resources-plugin-javadoc - update to 1.5-2
javamail - update to 1.5.2-7
javamail-javadoc - update to 1.5.2-7
objectweb-pom - update to 1.5-7
regexp - update to 1.5-26
regexp-javadoc - update to 1.5-26
exec-maven-plugin-javadoc - update to 1.6.0-3
exec-maven-plugin - update to 1.6.0-3
jflex - update to 1.6.1-12
jflex-javadoc - update to 1.6.1-12
powermock-api-easymock - update to 1.6.5-9
powermock-api-mockito - update to 1.6.5-9
powermock-api-support - update to 1.6.5-9
powermock-common - update to 1.6.5-9
powermock-core - update to 1.6.5-9
powermock-javadoc - update to 1.6.5-9
powermock-junit4 - update to 1.6.5-9
powermock-reflect - update to 1.6.5-9
powermock-testng - update to 1.6.5-9
maven-verifier - update to 1.6-6
plexus-cli-javadoc - update to 1.6-6
plexus-cli - update to 1.6-6
maven-verifier-javadoc - update to 1.6-6
xmlunit - update to 1.6-7
xmlunit-javadoc - update to 1.6-7
geronimo-parent-poms - update to 1.6-25
plexus-containers-container-default - update to 1.7.1-8
plexus-containers-javadoc - update to 1.7.1-8
plexus-containers - update to 1.7.1-8
plexus-containers-component-annotations - update to 1.7.1-8
plexus-containers-component-javadoc - update to 1.7.1-8
plexus-containers-component-metadata - update to 1.7.1-8
maven-doxia-sitetools-javadoc - update to 1.7.5-2
maven-doxia-sitetools - update to 1.7.5-2
jansi-native - update to 1.7-7
jansi-native-javadoc - update to 1.7-7
maven-doxia-module-latex - update to 1.7-8
maven-doxia-module-docbook-simple - update to 1.7-8
maven-doxia-module-rtf - update to 1.7-8
maven-doxia-module-twiki - update to 1.7-8
maven-doxia-module-xdoc - update to 1.7-8
maven-doxia-module-xhtml - update to 1.7-8
maven-doxia-modules - update to 1.7-8
maven-doxia-sink-api - update to 1.7-8
maven-doxia-test-docs - update to 1.7-8
maven-doxia-tests - update to 1.7-8
maven-doxia - update to 1.7-8
maven-doxia-core - update to 1.7-8
maven-doxia-module-fml - update to 1.7-8
maven-doxia-javadoc - update to 1.7-8
maven-doxia-logging-api - update to 1.7-8
maven-doxia-module-apt - update to 1.7-8
maven-doxia-module-confluence - update to 1.7-8
plexus-cipher-javadoc - update to 1.7-14
plexus-cipher - update to 1.7-14
velocity-manual - update to 1.7-24
velocity-demo - update to 1.7-24
velocity - update to 1.7-24
velocity-javadoc - update to 1.7-24
log4j-over-slf4j - update to 1.7.25-4
jcl-over-slf4j - update to 1.7.25-4
slf4j-sources - update to 1.7.25-4
jul-to-slf4j - update to 1.7.25-4
slf4j-manual - update to 1.7.25-4
slf4j-log4j12 - update to 1.7.25-4
slf4j-jdk14 - update to 1.7.25-4
slf4j-jcl - update to 1.7.25-4
slf4j - update to 1.7.25-4
slf4j-javadoc - update to 1.7.25-4
slf4j-ext - update to 1.7.25-4
maven-dependency-analyzer-javadoc - update to 1.8-2
maven-dependency-analyzer - update to 1.8-2
xz-java - update to 1.8-2
xz-java-javadoc - update to 1.8-2
maven-antrun-plugin-javadoc - update to 1.8-6
maven-antrun-plugin - update to 1.8-6
modello - update to 1.9.1-7
modello-javadoc - update to 1.9.1-7
maven-plugin-build-helper-javadoc - update to 1.9.1-8
maven-plugin-build-helper - update to 1.9.1-8
apache-commons-beanutils-javadoc - update to 1.9.3-5
apache-commons-beanutils - update to 1.9.3-5
felix-utils - update to 1.10.4-2
felix-utils-javadoc - update to 1.10.4-2
ant-apache-log4j - update to 1.10.5-1
ant-xz - update to 1.10.5-1
ant-testutil - update to 1.10.5-1
ant-swing - update to 1.10.5-1
ant - update to 1.10.5-1
ant-antlr - update to 1.10.5-1
ant-manual - update to 1.10.5-1
ant-lib - update to 1.10.5-1
ant-apache-bcel - update to 1.10.5-1
ant-apache-bsf - update to 1.10.5-1
ant-junit - update to 1.10.5-1
ant-apache-oro - update to 1.10.5-1
ant-apache-resolver - update to 1.10.5-1
ant-jdepend - update to 1.10.5-1
ant-javamail - update to 1.10.5-1
ant-javadoc - update to 1.10.5-1
ant-commons-net - update to 1.10.5-1
ant-commons-logging - update to 1.10.5-1
ant-apache-xalan2 - update to 1.10.5-1
ant-jmf - update to 1.10.5-1
ant-jsch - update to 1.10.5-1
ant-apache-regexp - update to 1.10.5-1
maven-invoker-plugin-javadoc - update to 1.10-7
maven-invoker-plugin - update to 1.10-7
mockito - update to 1.10.19-17
mockito-javadoc - update to 1.10.19-17
fusesource-pom - update to 1.11-3
apache-commons-codec - update to 1.11-3
apache-commons-codec-javadoc - update to 1.11-3
jsoup-javadoc - update to 1.11.3-3
jsoup - update to 1.11.3-3
byaccj - update to 1.15-17
MongoDB Enterprise Advanced with IBM - update to 1.16.0
hawtjni-javadoc - update to 1.16-2
hawtjni - update to 1.16-2
maven-hawtjni-plugin - update to 1.16-2
hawtjni-runtime - update to 1.16-2
jansi - update to 1.17.1-1
jansi-javadoc - update to 1.17.1-1
apache-commons-compress-javadoc - update to 1.18-1
apache-commons-compress - update to 1.18-1
plexus-interpolation - update to 1.22-9
plexus-interpolation-javadoc - update to 1.22-9
atinject - update to 1-28.20100611svn86
atinject-tck - update to 1-28.20100611svn86
atinject-javadoc - update to 1-28.20100611svn86
beust-jcommander-javadoc - update to 1.71-5
beust-jcommander - update to 1.71-5
qdox-javadoc - update to 2.0-3.M9
qdox - update to 2.0-3.M9
jdom2-javadoc - update to 2.0.6-12
jdom2 - update to 2.0.6-12
jakarta-oro-javadoc - update to 2.0.8-23
jakarta-oro - update to 2.0.8-23
bsh-javadoc - update to 2.0-13.b6
bsh-manual - update to 2.0-13.b6
bsh - update to 2.0-13.b6
maven2-javadoc - update to 2.2.1-59
maven-plugin-registry - update to 2.2.1-59
maven-settings - update to 2.2.1-59
maven-artifact-manager - update to 2.2.1-59
maven-artifact - update to 2.2.1-59
maven-plugin-descriptor - update to 2.2.1-59
maven-monitor - update to 2.2.1-59
maven-model - update to 2.2.1-59
maven-project - update to 2.2.1-59
maven-toolchain - update to 2.2.1-59
maven-profile - update to 2.2.1-59
maven-invoker - update to 2.2-7
maven-invoker-javadoc - update to 2.2-7
glassfish-jsp-api-javadoc - update to 2.3.2-0.9.b01
glassfish-jsp-api - update to 2.3.2-0.9.b01
apache-ivy-javadoc - update to 2.4.0-14
apache-ivy - update to 2.4.0-14
bsf-javadoc - update to 2.4.0-30
bsf - update to 2.4.0-30
maven-install-plugin-javadoc - update to 2.5.2-7
maven-install-plugin - update to 2.5.2-7
plexus-classworlds-javadoc - update to 2.5.2-9
plexus-classworlds - update to 2.5.2-9
objenesis-javadoc - update to 2.6-2
objenesis - update to 2.6-2
apache-commons-io - update to 2.6-3
apache-commons-io-javadoc - update to 2.6-3
apache-commons-lang-javadoc - update to 2.6-21
apache-commons-lang - update to 2.6-21
javacc-maven-plugin-javadoc - update to 2.6-25
javacc-maven-plugin - update to 2.6-25
xalan-j2 - update to 2.7.1-38
xalan-j2-manual - update to 2.7.1-38
xalan-j2-demo - update to 2.7.1-38
xalan-j2-javadoc - update to 2.7.1-38
xalan-j2-xsltc - update to 2.7.1-38
antlr-C++ - update to 2.7.7-56
antlr-manual - update to 2.7.7-56
antlr-tool - update to 2.7.7-56
antlr-javadoc - update to 2.7.7-56
plexus-compiler-extras - update to 2.8.2-2
plexus-compiler-javadoc - update to 2.8.2-2
plexus-compiler - update to 2.8.2-2
plexus-compiler-pom - update to 2.8.2-2
jdepend-javadoc - update to 2.9.1-18
jdepend-demo - update to 2.9.1-18
jdepend - update to 2.9.1-18
xerces-j2 - update to 2.11.0-34
xerces-j2-demo - update to 2.11.0-34
xerces-j2-javadoc - update to 2.11.0-34
jline - update to 2.14.6-2
jline-javadoc - update to 2.14.6-2
apache-resource-bundles - update to 2-20
maven-surefire-plugin - update to 2.22.0-3
maven-surefire-javadoc - update to 2.22.0-3
maven-surefire - update to 2.22.0-3
maven-surefire-report-parser - update to 2.22.0-3
maven-surefire-report-plugin - update to 2.22.0-3
maven-failsafe-plugin - update to 2.22.0-3
maven-surefire-provider-junit - update to 2.22.0-3
maven-surefire-provider-testng - update to 2.22.0-3
plexus-io - update to 3.0.0-2
plexus-io-javadoc - update to 3.0.0-2
maven-reporting-impl-javadoc - update to 3.0.0-4
maven-reporting-impl - update to 3.0.0-4
maven-file-management-javadoc - update to 3.0.0-5
maven-shared-io-javadoc - update to 3.0.0-5
maven-shared-io - update to 3.0.0-5
maven-clean-plugin - update to 3.0.0-5
maven-clean-plugin-javadoc - update to 3.0.0-5
maven-file-management - update to 3.0.0-5
xmvn-subst - update to 3.0.0-21
xmvn-resolve - update to 3.0.0-21
xmvn-bisect - update to 3.0.0-21
xmvn-connector-aether - update to 3.0.0-21
xmvn-connector-ivy - update to 3.0.0-21
xmvn-tools-pom - update to 3.0.0-21
xmvn-core - update to 3.0.0-21
xmvn-install - update to 3.0.0-21
xmvn-api - update to 3.0.0-21
xmvn - update to 3.0.0-21
xmvn-javadoc - update to 3.0.0-21
xmvn-minimal - update to 3.0.0-21
xmvn-mojo - update to 3.0.0-21
xmvn-parent-pom - update to 3.0.0-21
glassfish-el-javadoc - update to 3.0.1-0.7.b08
glassfish-el - update to 3.0.1-0.7.b08
glassfish-el-api - update to 3.0.1-0.7.b08
maven-common-artifact-filters-javadoc - update to 3.0.1-4
maven-source-plugin-javadoc - update to 3.0.1-4
maven-source-plugin - update to 3.0.1-4
maven-common-artifact-filters - update to 3.0.1-4
maven-dependency-plugin-javadoc - update to 3.0.2-2
maven-dependency-plugin - update to 3.0.2-2
maven-dependency-tree - update to 3.0-5
maven-dependency-tree-javadoc - update to 3.0-5
maven-reporting-api-javadoc - update to 3.0-14
maven-reporting-api - update to 3.0-14
maven-wagon-ftp - update to 3.1.0-1
maven-jar-plugin - update to 3.1.0-1
maven-wagon-providers - update to 3.1.0-1
maven-wagon-provider-api - update to 3.1.0-1
maven-wagon-javadoc - update to 3.1.0-1
maven-wagon-http-shared - update to 3.1.0-1
maven-wagon-http-lightweight - update to 3.1.0-1
maven-wagon-http - update to 3.1.0-1
maven-wagon-file - update to 3.1.0-1
maven-wagon - update to 3.1.0-1
maven-jar-plugin-javadoc - update to 3.1.0-1
maven-assembly-plugin - update to 3.1.0-3
maven-resources-plugin - update to 3.1.0-3
maven-resources-plugin-javadoc - update to 3.1.0-3
maven-assembly-plugin-javadoc - update to 3.1.0-3
maven-shade-plugin - update to 3.1.0-3
maven-shade-plugin-javadoc - update to 3.1.0-3
plexus-utils - addressed in versions 3.1.0-3.0.1, 3.4.2-2
plexus-utils-javadoc - addressed in versions 3.1.0-3.0.1, 3.4.2-2
glassfish-servlet-api-javadoc - update to 3.1.0-14
glassfish-servlet-api - update to 3.1.0-14
maven-filtering - update to 3.1.1-5
maven-filtering-javadoc - update to 3.1.1-5
jakarta-commons-httpclient - update to 3.1-28
jakarta-commons-httpclient-demo - update to 3.1-28
jakarta-commons-httpclient-javadoc - update to 3.1-28
jakarta-commons-httpclient-manual - update to 3.1-28
maven-archiver - update to 3.2.0-2
maven-archiver-javadoc - update to 3.2.0-2
maven-shared-utils - update to 3.2.1-0.1
maven-shared-utils-javadoc - update to 3.2.1-0.1
apache-commons-collections-testframework - update to 3.2.2-10
apache-commons-collections-javadoc - update to 3.2.2-10
apache-commons-collections - update to 3.2.2-10
cglib-javadoc - update to 3.2.4-7
cglib - update to 3.2.4-7
plexus-utils (Red Hat package) - addressed in versions 3.3.0-10.el9_2.2, 3.3.0-10.el9_4.2, 3.3.0-13.el9_6.1, 3.5.1-8.el10_0.1, 3.5.1-9.el10_2
maven-test-tools - update to 3.3.0-12
maven-plugin-testing-tools - update to 3.3.0-12
maven-plugin-testing-javadoc - update to 3.3.0-12
maven-plugin-testing-harness - update to 3.3.0-12
maven-plugin-testing - update to 3.3.0-12
maven-plugin-bundle - update to 3.5.0-2
maven-plugin-bundle-javadoc - update to 3.5.0-2
aqute-bndlib - update to 3.5.0-4
bnd-maven-plugin - update to 3.5.0-4
aqute-bnd-javadoc - update to 3.5.0-4
aqute-bnd - update to 3.5.0-4
maven-plugin-tools-generators - update to 3.5.1-4
maven-script-beanshell - update to 3.5.1-4
maven-script-ant - update to 3.5.1-4
maven-script - update to 3.5.1-4
maven-plugin-tools-model - update to 3.5.1-4
maven-plugin-tools-javadocs - update to 3.5.1-4
maven-plugin-tools-javadoc - update to 3.5.1-4
maven-plugin-tools-java - update to 3.5.1-4
maven-plugin-annotations - update to 3.5.1-4
maven-plugin-tools-beanshell - update to 3.5.1-4
maven-plugin-tools-api - update to 3.5.1-4
maven-plugin-tools-ant - update to 3.5.1-4
maven-plugin-plugin - update to 3.5.1-4
maven-plugin-tools - update to 3.5.1-4
maven-plugin-tools-annotations - update to 3.5.1-4
easymock-javadoc - update to 3.5-4
easymock - update to 3.5-4
maven-javadoc - update to 3.5.4-5
maven-lib - update to 3.5.4-5
maven - update to 3.5.4-5
plexus-archiver - update to 3.6.0-1
plexus-archiver-javadoc - update to 3.6.0-1
apache-commons-net-javadoc - update to 3.6-3
apache-commons-net - update to 3.6-3
maven-compiler-plugin - update to 3.7.0-2
maven-compiler-plugin-javadoc - update to 3.7.0-2
apache-commons-lang3-javadoc - update to 3.7-3
apache-commons-lang3 - update to 3.7-3
assertj-core-javadoc - update to 3.8.0-2
assertj-core - update to 3.8.0-2
javassist-javadoc - update to 3.18.1-8
javassist - update to 3.18.1-8
plexus-utils - update to 4.0.2-150200.3.14.1
plexus-utils-javadoc - update to 4.0.2-150200.3.14.1
google-guice - update to 4.1-11
guice-extensions - update to 4.1-11
guice-bom - update to 4.1-11
guice-assistedinject - update to 4.1-11
guice-parent - update to 4.1-11
guice-grapher - update to 4.1-11
google-guice-javadoc - update to 4.1-11
guice-jmx - update to 4.1-11
guice-servlet - update to 4.1-11
guice-testlib - update to 4.1-11
guice-throwingproviders - update to 4.1-11
guice-jndi - update to 4.1-11
guice-multibindings - update to 4.1-11
httpcomponents-core - update to 4.4.10-4
httpcomponents-core-javadoc - update to 4.4.10-4
felix-parent - update to 4-5
httpcomponents-client-javadoc - update to 4.5.5-4
httpcomponents-client - update to 4.5.5-4
httpcomponents-client-cache - update to 4.5.5-4
xbean-javadoc - update to 4.8-1
xbean - update to 4.8-1
jvnet-parent - update to 4-10
junit - update to 4.12-9
junit-javadoc - update to 4.12-9
junit-manual - update to 4.12-9
plexus-pom - update to 5.0-2
ivy-local - update to 5.3.0-2
javapackages-filesystem - update to 5.3.0-2
javapackages-local - update to 5.3.0-2
javapackages-tools - update to 5.3.0-2
maven-local - update to 5.3.0-2
python3-javapackages - update to 5.3.0-2
osgi-compendium - update to 6.0.0-5
osgi-compendium-javadoc - update to 6.0.0-5
osgi-core - update to 6.0.0-6
osgi-core-javadoc - update to 6.0.0-6
osgi-annotation - update to 6.0.0-7
osgi-annotation-javadoc - update to 6.0.0-7
bcel-javadoc - update to 6.2-2
bcel - update to 6.2-2
objectweb-asm-javadoc - update to 6.2-5
objectweb-asm - update to 6.2-5
testng - update to 6.14.3-5
testng-javadoc - update to 6.14.3-5
javacc-javadoc - update to 7.0.2-6
javacc-manual - update to 7.0.2-6
javacc-demo - update to 7.0.2-6
javacc - update to 7.0.2-6
sonatype-oss-parent - update to 7-14
glassfish-master-pom - update to 8-11
sonatype-plugins-parent - update to 8-12
httpcomponents-project - update to 9-2
apache-parent - update to 19-2
guava20 - update to 20.0-8
guava20-javadoc - update to 20.0-8
guava20-testlib - update to 20.0-8
jboss-parent - update to 20-4
maven-shared - update to 22-6
spice-parent - update to 26-8
maven-parent - update to 27-5
maven-plugins-pom - update to 28-7
weld-parent - update to 34-5
forge-parent - update to 38-11
mojo-parent - update to 40-6
apache-commons-parent - update to 43-2

External References

Related Security Bulletins