CVE-2025-67030
Plexus-Utils has a Directory Traversal vulnerability in its extractFile method
8.8 HighFix available
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
0.69%Up 0.6 points since Mar 26, 2026
What each source reports
NVD Score used
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
- Record
CVE-2025-67030- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
- Record
CVE-2025-67030- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L - Weakness
- CWE-22, CWE-22
- Updated
- 2026-11-02
EUVDEUVD-2025-209002
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
- Record
EUVD-2025-209002- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-6fmv-xxpf-w3cw No score
Plexus-Utils has a Directory Traversal vulnerability in its extractFile method
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
- Record
GHSA-6fmv-xxpf-w3cw- Weakness
- CWE-22
- Updated
- 2026-11-02
OSV
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
- Record
CVE-2025-67030- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2025-67030
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
- Record
DEBIAN-CVE-2025-67030- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 48 moreShow less
OSVRHLW-2026-cd27691c140aa026
Lightwell Security Advisory: plexus-utils 4.0.1.rhlw-00001
Red Hat Lightwell has released org.codehaus.plexus:plexus-utils 4.0.1.rhlw-00001 with a backported security fix.
CVE-2025-67030: Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
This patched artifact is a drop-in replacement for org.codehaus.plexus:plexus-utils 4.0.1 from Maven Central.
- Record
RHLW-2026-cd27691c140aa026- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:18054
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.6 security update
- Record
RHSA-2026:18054- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:18055
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.6 security update
- Record
RHSA-2026:18055- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:35990
Red Hat Security Advisory: plexus-utils security update
- Record
RHSA-2026:35990- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2026:35991
Red Hat Security Advisory: plexus-utils security update
- Record
RHSA-2026:35991- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2026:35992
Red Hat Security Advisory: plexus-utils security update
- Record
RHSA-2026:35992- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2026:35996
Red Hat Security Advisory: maven:3.8 security update
- Record
RHSA-2026:35996- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2026:35997
Red Hat Security Advisory: plexus-utils security update
- Record
RHSA-2026:35997- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2026:36012
Red Hat Security Advisory: maven:3.9 security update
- Record
RHSA-2026:36012- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2026:38500
Red Hat Security Advisory: maven:3.9 security update
- Record
RHSA-2026:38500- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2026:38514
Red Hat Security Advisory: plexus-utils security update
- Record
RHSA-2026:38514- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2026:38796
Red Hat Security Advisory: plexus-utils security update
- Record
RHSA-2026:38796- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2026:40841
Red Hat Security Advisory: maven:3.8 security update
- Record
RHSA-2026:40841- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2026:41948
Red Hat Security Advisory: javapackages-tools:201801 security update
- Record
RHSA-2026:41948- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRLSA-2026:38500
Important: maven:3.9 security update
Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information.
Security Fix(es):
- org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:38500- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRLSA-2026:38514
Important: plexus-utils security update
The Plexus project seeks to create end-to-end developer tools for writing applications. At the core is the container, which can be embedded or for a full scale application server. There are many reusable components for hibernate, form processing, jndi, i18n, velocity, etc. Plexus also includes an application server which is like a J2EE application server, without all the baggage.
Security Fix(es):
- org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:38514- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRLSA-2026:38796
Important: plexus-utils security update
The Plexus project seeks to create end-to-end developer tools for writing applications. At the core is the container, which can be embedded or for a full scale application server. There are many reusable components for hibernate, form processing, jndi, i18n, velocity, etc. Plexus also includes an application server which is like a J2EE application server, without all the baggage.
Security Fix(es):
- org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:38796- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRLSA-2026:40841
Important: maven:3.8 security update
Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information.
Security Fix(es):
- org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:40841- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRLSA-2026:41948
Important: javapackages-tools:201801 security update
The javapackages-tools packages provide macros and scripts to support Java packaging.
Security Fix(es):
- org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:41948- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-67030
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
- Record
UBUNTU-CVE-2025-67030- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L - Updated
- 2026-11-02
OSVALSA-2026:38500 No score
Important: maven:3.9 security update
Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information.
Security Fix(es):
- org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:38500- Updated
- 2026-11-02
OSVALSA-2026:38514 No score
Important: plexus-utils security update
The Plexus project seeks to create end-to-end developer tools for writing applications. At the core is the container, which can be embedded or for a full scale application server. There are many reusable components for hibernate, form processing, jndi, i18n, velocity, etc. Plexus also includes an application server which is like a J2EE application server, without all the baggage.
Security Fix(es):
- org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:38514- Updated
- 2026-11-02
OSVALSA-2026:38796 No score
Important: plexus-utils security update
The Plexus project seeks to create end-to-end developer tools for writing applications. At the core is the container, which can be embedded or for a full scale application server. There are many reusable components for hibernate, form processing, jndi, i18n, velocity, etc. Plexus also includes an application server which is like a J2EE application server, without all the baggage.
Security Fix(es):
- org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:38796- Updated
- 2026-11-02
OSVALSA-2026:40841 No score
Important: maven:3.8 security update
Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information.
Security Fix(es):
- org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:40841- Updated
- 2026-11-02
OSVALSA-2026:41948 No score
Important: javapackages-tools:201801 security update
The javapackages-tools packages provide macros and scripts to support Java packaging.
Security Fix(es):
- org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:41948- Updated
- 2026-11-02
OSVAZL-81041 No score
CVE-2025-67030 affecting package plexus-utils for versions less than 3.3.0-5
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
- Record
AZL-81041- Updated
- 2026-11-05
OSVCLSA-2026-1775089628 No score
TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.1.0-tuxcare.1.
- Record
CLSA-2026-1775089628- Updated
- 2026-11-02
OSVCLSA-2026-1775435424 No score
TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 1.4.5-tuxcare.2.
- Record
CLSA-2026-1775435424- Updated
- 2026-11-02
OSVCLSA-2026-1776818205 No score
TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.6.0-tuxcare.1.
- Record
CLSA-2026-1776818205- Updated
- 2026-11-02
OSVCLSA-2026-1777038119 No score
plexus-utils: Fix of CVE-2025-67030
- CVE-2025-67030 fix zip slip via canonical path check in Expand
- Record
CLSA-2026-1777038119- Updated
- 2026-11-02
OSVCLSA-2026-1777336747 No score
TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 1.5.8-tuxcare.1.
- Record
CLSA-2026-1777336747- Updated
- 2026-11-02
OSVCLSA-2026-1777454474 No score
plexus-utils: Fix of CVE-2025-67030
- CVE-2025-67030: fix Zip Slip / directory traversal in Expand.extractFile (canonical path check)
- Record
CLSA-2026-1777454474- Updated
- 2026-11-02
OSVCLSA-2026-1780274964 No score
TuxCare security update for commons-digester:commons-digester (4 CVEs)
TuxCare rebuilt commons-digester:commons-digester to address 4 CVEs. Fixed in 2.1-tuxcare.1.
- Record
CLSA-2026-1780274964- Updated
- 2026-11-02
OSVCLSA-2026-1785917160 No score
TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.5.1-tuxcare.1.
- Record
CLSA-2026-1785917160- Updated
- 2026-11-02
OSVCLSA-2026-1786379530 No score
TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 1.2-tuxcare.1.
- Record
CLSA-2026-1786379530- Updated
- 2026-11-02
OSVCLSA-2026-1786379574 No score
TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 2.0.4-tuxcare.1.
- Record
CLSA-2026-1786379574- Updated
- 2026-11-02
OSVCLSA-2026-1786379602 No score
TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.0.15-tuxcare.1.
- Record
CLSA-2026-1786379602- Updated
- 2026-11-02
OSVCLSA-2026-1786379623 No score
TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.0.17-tuxcare.1.
- Record
CLSA-2026-1786379623- Updated
- 2026-11-02
OSVCLSA-2026-1786379673 No score
TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.3.1-tuxcare.1.
- Record
CLSA-2026-1786379673- Updated
- 2026-11-02
OSVCLSA-2026-1786379708 No score
TuxCare security update for org.codehaus.plexus:plexus-utils (2 CVEs)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 2 CVEs. Fixed in 3.0.18-tuxcare.1.
- Record
CLSA-2026-1786379708- Updated
- 2026-11-02
OSVCLSA-2026-1786379712 No score
TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.2.0-tuxcare.1.
- Record
CLSA-2026-1786379712- Updated
- 2026-11-02
OSVCLSA-2026-1786379796 No score
TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.0.24-tuxcare.1.
- Record
CLSA-2026-1786379796- Updated
- 2026-11-02
OSVCLSA-2026-1786379889 No score
TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.4.2-tuxcare.1.
- Record
CLSA-2026-1786379889- Updated
- 2026-11-02
OSVCLSA-2026-1786637554 No score
TuxCare security update for io.micronaut (1 CVE)
TuxCare rebuilt 35 io.micronaut packages to address 1 CVE. Fixed in 3.6.0-tuxcare.1.
- Record
CLSA-2026-1786637554- Updated
- 2026-11-02
OSVCLSA-2026-1787115093 No score
TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.0.20-tuxcare.1.
- Record
CLSA-2026-1787115093- Updated
- 2026-11-02
OSVCLSA-2026-1788151769 No score
TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 1.5.6-tuxcare.1.
- Record
CLSA-2026-1788151769- Updated
- 2026-11-02
OSVCLSA-2026-1788173007 No score
TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.2.1-tuxcare.1.
- Record
CLSA-2026-1788173007- Updated
- 2026-11-02
OSVCLSA-2026-1788187104 No score
TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 4.0.1-tuxcare.1.
- Record
CLSA-2026-1788187104- Updated
- 2026-11-02
Affected products
- codehaus-plexus plexus-utils
- red hat cryostat 4
- red hat openshift developer tools and services
- red hat openshift developer tools and services 4.12
- red hat openshift developer tools and services 4.13
- red hat openshift developer tools and services 4.14
- red hat openshift developer tools and services 4.15
- red hat openshift developer tools and services 4.16
- red hat openshift developer tools and services 4.17
- red hat openshift developer tools and services 4.18
- red hat openshift developer tools and services 4.19
- red hat openshift developer tools and services 4.20
Show 40 moreShow less
- red hat openshift developer tools and services 4.21
- red hat openshift developer tools and services 4.22
- red hat openshift serverless
- red hat amq broker 7
- red hat amq clients
- red hat build of apache camel 4.18.1 for spring boot 3.5.14
- red hat build of apicurio registry 2
- red hat build of apicurio registry 3
- red hat build of debezium 3
- red hat build of quarkus 3.20.6
- red hat build of quarkus 3.27.3
- red hat build of quarkus native builder
- red hat data grid 8
- red hat enterprise linux 10
- red hat enterprise linux 10.0 extended update support
- red hat enterprise linux 6
- red hat enterprise linux 7
- red hat enterprise linux 8
- red hat enterprise linux 8.8 telecommunications update service
- red hat enterprise linux 8.8 update services for sap solutions
- red hat enterprise linux 9
- red hat enterprise linux 9.2 update services for sap solutions
- red hat enterprise linux 9.4 update services for sap solutions
- red hat enterprise linux 9.6 extended update support
- red hat fuse 7
- red hat jboss core services
- red hat jboss enterprise application platform 7
- red hat jboss enterprise application platform 8.1 for rhel 8
- red hat jboss enterprise application platform 8.1 for rhel 9
- red hat jboss enterprise application platform 8.1.7.ga
- red hat jboss enterprise application platform expansion pack
- red hat jboss web server 5
- red hat jboss web server 6
- red hat openshift ai (rhoai)
- red hat openshift ai 2.25
- red hat process automation 7
- red hat satellite 6
- red hat single sign-on 7
- red hat streams for apache kafka 2
- red hat streams for apache kafka 3
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.codehaus.plexus:plexus-utilsMaven |
4.0.0 up to 4.0.3 | 4.0.3 |
org.codehaus.plexus:plexus-utilsMaven |
before 3.6.1 | 3.6.1 |
aopallianceAlmaLinux:9 |
before 1.0-51.module_el9.6.0+148+fb6dc857 | 1.0-51.module_el9.6.0+148+fb6dc857 |
apache-commons-cliAlmaLinux:9 |
before 1.9.0-4.module_el9.6.0+148+fb6dc857 | 1.9.0-4.module_el9.6.0+148+fb6dc857 |
apache-commons-codecAlmaLinux:9 |
before 1.17.1-8.module_el9.6.0+148+fb6dc857 | 1.17.1-8.module_el9.6.0+148+fb6dc857 |
apache-commons-ioAlmaLinux:9 |
before 1:2.16.1-9.module_el9.6.0+148+fb6dc857 | 1:2.16.1-9.module_el9.6.0+148+fb6dc857 |
atinjectAlmaLinux:9 |
before 1.0.5-14.module_el9.6.0+148+fb6dc857 | 1.0.5-14.module_el9.6.0+148+fb6dc857 |
google-guiceAlmaLinux:9 |
before 5.1.0-23.module_el9.6.0+148+fb6dc857 | 5.1.0-23.module_el9.6.0+148+fb6dc857 |
guavaAlmaLinux:9 |
before 33.3.0-5.module_el9.6.0+148+fb6dc857 | 33.3.0-5.module_el9.6.0+148+fb6dc857 |
httpcomponents-clientAlmaLinux:9 |
before 4.5.14-21.module_el9.6.0+148+fb6dc857 | 4.5.14-21.module_el9.6.0+148+fb6dc857 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
httpcomponents-coreAlmaLinux:9 |
before 4.4.16-21.module_el9.6.0+148+fb6dc857 | 4.4.16-21.module_el9.6.0+148+fb6dc857 |
jakarta-annotationsAlmaLinux:9 |
before 1.3.5-38.module_el9.6.0+148+fb6dc857 | 1.3.5-38.module_el9.6.0+148+fb6dc857 |
jansiAlmaLinux:9 |
before 2.4.1-12.module_el9.6.0+148+fb6dc857 | 2.4.1-12.module_el9.6.0+148+fb6dc857 |
jcl-over-slf4jAlmaLinux:9 |
before 1.7.36-9.module_el9.6.0+148+fb6dc857 | 1.7.36-9.module_el9.6.0+148+fb6dc857 |
jsr-305AlmaLinux:9 |
before 3.0.2-36.module_el9.6.0+148+fb6dc857 | 3.0.2-36.module_el9.6.0+148+fb6dc857 |
mavenAlmaLinux:9 |
before 1:3.9.9-13.module_el9.8.0+229+787fb9a7 | 1:3.9.9-13.module_el9.8.0+229+787fb9a7 |
maven-libAlmaLinux:9 |
before 1:3.9.9-13.module_el9.8.0+229+787fb9a7 | 1:3.9.9-13.module_el9.8.0+229+787fb9a7 |
maven-openjdk11AlmaLinux:9 |
before 1:3.9.9-13.module_el9.8.0+229+787fb9a7 | 1:3.9.9-13.module_el9.8.0+229+787fb9a7 |
maven-openjdk17AlmaLinux:9 |
before 1:3.9.9-13.module_el9.8.0+229+787fb9a7 | 1:3.9.9-13.module_el9.8.0+229+787fb9a7 |
maven-openjdk21AlmaLinux:9 |
before 1:3.9.9-13.module_el9.8.0+229+787fb9a7 | 1:3.9.9-13.module_el9.8.0+229+787fb9a7 |
maven-openjdk25AlmaLinux:9 |
before 1:3.9.9-13.module_el9.8.0+229+787fb9a7 | 1:3.9.9-13.module_el9.8.0+229+787fb9a7 |
maven-openjdk8AlmaLinux:9 |
before 1:3.9.9-13.module_el9.8.0+229+787fb9a7 | 1:3.9.9-13.module_el9.8.0+229+787fb9a7 |
maven-resolverAlmaLinux:9 |
before 1:1.9.22-6.module_el9.6.0+148+fb6dc857 | 1:1.9.22-6.module_el9.6.0+148+fb6dc857 |
maven-shared-utilsAlmaLinux:9 |
before 3.4.2-19.module_el9.6.0+148+fb6dc857 | 3.4.2-19.module_el9.6.0+148+fb6dc857 |
maven-unboundAlmaLinux:9 |
before 1:3.9.9-13.module_el9.8.0+229+787fb9a7 | 1:3.9.9-13.module_el9.8.0+229+787fb9a7 |
maven-wagonAlmaLinux:9 |
before 3.5.3-17.module_el9.6.0+148+fb6dc857 | 3.5.3-17.module_el9.6.0+148+fb6dc857 |
plexus-cipherAlmaLinux:9 |
before 2.0-25.module_el9.6.0+148+fb6dc857 | 2.0-25.module_el9.6.0+148+fb6dc857 |
plexus-classworldsAlmaLinux:9 |
before 2.8.0-9.module_el9.6.0+148+fb6dc857 | 2.8.0-9.module_el9.6.0+148+fb6dc857 |
plexus-containers-component-annotationsAlmaLinux:9 |
before 2.2.0-10.module_el9.6.0+148+fb6dc857 | 2.2.0-10.module_el9.6.0+148+fb6dc857 |
plexus-interpolationAlmaLinux:9 |
before 1.27-10.module_el9.6.0+148+fb6dc857 | 1.27-10.module_el9.6.0+148+fb6dc857 |
plexus-sec-dispatcherAlmaLinux:9 |
before 2.0-28.module_el9.6.0+148+fb6dc857 | 2.0-28.module_el9.6.0+148+fb6dc857 |
plexus-utilsAlmaLinux:9 |
before 3.5.1-17.module_el9.8.0+282+e62fc403.1 | 3.5.1-17.module_el9.8.0+282+e62fc403.1 |
sisuAlmaLinux:9 |
before 1:0.9.0~M3-7.module_el9.6.0+148+fb6dc857 | 1:0.9.0~M3-7.module_el9.6.0+148+fb6dc857 |
slf4jAlmaLinux:9 |
before 1.7.36-9.module_el9.6.0+148+fb6dc857 | 1.7.36-9.module_el9.6.0+148+fb6dc857 |
plexus-utilsAlmaLinux:10 |
before 3.5.1-9.el10_2 | 3.5.1-9.el10_2 |
plexus-utils-javadocAlmaLinux:10 |
before 3.5.1-9.el10_2 | 3.5.1-9.el10_2 |
plexus-utilsAlmaLinux:9 |
before 3.3.0-14.el9_8 | 3.3.0-14.el9_8 |
apache-commons-cliAlmaLinux:8 |
before 1.5.0-5.module_el8.10.0+3805+55513176 | 1.5.0-5.module_el8.10.0+3805+55513176 |
apache-commons-codecAlmaLinux:8 |
before 1.15-8.module_el8.10.0+3805+55513176 | 1.15-8.module_el8.10.0+3805+55513176 |
apache-commons-ioAlmaLinux:8 |
before 1:2.11.0-3.module_el8.10.0+3805+55513176 | 1:2.11.0-3.module_el8.10.0+3805+55513176 |
apache-commons-lang3AlmaLinux:8 |
before 3.12.0-8.module_el8.10.0+3805+55513176 | 3.12.0-8.module_el8.10.0+3805+55513176 |
atinjectAlmaLinux:8 |
before 1.0.5-5.module_el8.10.0+3805+55513176 | 1.0.5-5.module_el8.10.0+3805+55513176 |
cdi-apiAlmaLinux:8 |
before 2.0.2-7.module_el8.10.0+3805+55513176 | 2.0.2-7.module_el8.10.0+3805+55513176 |
google-guiceAlmaLinux:8 |
before 4.2.3-10.module_el8.10.0+3805+55513176 | 4.2.3-10.module_el8.10.0+3805+55513176 |
guavaAlmaLinux:8 |
before 31.0.1-5.module_el8.10.0+3805+55513176 | 31.0.1-5.module_el8.10.0+3805+55513176 |
httpcomponents-clientAlmaLinux:8 |
before 4.5.13-6.module_el8.10.0+3805+55513176 | 4.5.13-6.module_el8.10.0+3805+55513176 |
httpcomponents-coreAlmaLinux:8 |
before 4.4.13-8.module_el8.10.0+3805+55513176 | 4.4.13-8.module_el8.10.0+3805+55513176 |
jakarta-annotationsAlmaLinux:8 |
before 1.3.5-15.module_el8.10.0+3805+55513176 | 1.3.5-15.module_el8.10.0+3805+55513176 |
jansiAlmaLinux:8 |
before 2.4.0-7.module_el8.10.0+3805+55513176 | 2.4.0-7.module_el8.10.0+3805+55513176 |
jcl-over-slf4jAlmaLinux:8 |
before 1.7.32-5.module_el8.10.0+3805+55513176 | 1.7.32-5.module_el8.10.0+3805+55513176 |
jsr-305AlmaLinux:8 |
before 3.0.2-7.module_el8.10.0+3805+55513176 | 3.0.2-7.module_el8.10.0+3805+55513176 |
mavenAlmaLinux:8 |
before 1:3.8.5-6.module_el8.10.0+3805+55513176 | 1:3.8.5-6.module_el8.10.0+3805+55513176 |
maven-libAlmaLinux:8 |
before 1:3.8.5-6.module_el8.10.0+3805+55513176 | 1:3.8.5-6.module_el8.10.0+3805+55513176 |
maven-openjdk11AlmaLinux:8 |
before 1:3.8.5-6.module_el8.10.0+3805+55513176 | 1:3.8.5-6.module_el8.10.0+3805+55513176 |
maven-openjdk17AlmaLinux:8 |
before 1:3.8.5-6.module_el8.10.0+3805+55513176 | 1:3.8.5-6.module_el8.10.0+3805+55513176 |
maven-openjdk21AlmaLinux:8 |
before 1:3.8.5-6.module_el8.10.0+3805+55513176 | 1:3.8.5-6.module_el8.10.0+3805+55513176 |
maven-openjdk8AlmaLinux:8 |
before 1:3.8.5-6.module_el8.10.0+3805+55513176 | 1:3.8.5-6.module_el8.10.0+3805+55513176 |
maven-resolverAlmaLinux:8 |
before 1:1.7.3-6.module_el8.10.0+3805+55513176 | 1:1.7.3-6.module_el8.10.0+3805+55513176 |
maven-shared-utilsAlmaLinux:8 |
before 3.3.4-6.module_el8.10.0+3805+55513176 | 3.3.4-6.module_el8.10.0+3805+55513176 |
maven-wagonAlmaLinux:8 |
before 3.5.1-3.module_el8.10.0+3805+55513176 | 3.5.1-3.module_el8.10.0+3805+55513176 |
plexus-cipherAlmaLinux:8 |
before 2.0-3.module_el8.10.0+3805+55513176 | 2.0-3.module_el8.10.0+3805+55513176 |
plexus-classworldsAlmaLinux:8 |
before 2.6.0-13.module_el8.10.0+3805+55513176 | 2.6.0-13.module_el8.10.0+3805+55513176 |
plexus-containers-component-annotationsAlmaLinux:8 |
before 2.1.1-3.module_el8.10.0+3805+55513176 | 2.1.1-3.module_el8.10.0+3805+55513176 |
plexus-interpolationAlmaLinux:8 |
before 1.26-13.module_el8.10.0+3805+55513176 | 1.26-13.module_el8.10.0+3805+55513176 |
plexus-sec-dispatcherAlmaLinux:8 |
before 2.0-5.module_el8.10.0+3805+55513176 | 2.0-5.module_el8.10.0+3805+55513176 |
plexus-utilsAlmaLinux:8 |
before 3.3.0-11.module_el8.10.0+4229+5e0a6206.1 | 3.3.0-11.module_el8.10.0+4229+5e0a6206.1 |
sisuAlmaLinux:8 |
before 1:0.3.5-3.module_el8.10.0+3805+55513176 | 1:0.3.5-3.module_el8.10.0+3805+55513176 |
slf4jAlmaLinux:8 |
before 1.7.32-5.module_el8.10.0+3805+55513176 | 1.7.32-5.module_el8.10.0+3805+55513176 |
antAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-antlrAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-apache-bcelAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-apache-bsfAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-apache-log4jAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-apache-oroAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-apache-regexpAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-apache-resolverAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-apache-xalan2AlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-commons-loggingAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
plexus-utilsAzure Linux:3 |
before 3.3.0-5 | 3.3.0-5 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
3.1.0 up to 3.1.0-tuxcare.1 | 3.1.0-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
1.4.5 up to 1.4.5-tuxcare.2, plus listed versions 1.4.5-tuxcare.1 |
1.4.5-tuxcare.2 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
3.6.0 up to 3.6.0-tuxcare.1 | 3.6.0-tuxcare.1 |
plexus-utilsTuxCare:AlmaLinux:9.2 |
before 3.3.0-10.el9.tuxcare.els1 | 3.3.0-10.el9.tuxcare.els1 |
plexus-utils-javadocTuxCare:AlmaLinux:9.2 |
before 3.3.0-10.el9.tuxcare.els1 | 3.3.0-10.el9.tuxcare.els1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
1.5.8 up to 1.5.8-tuxcare.1, plus listed versions 1.5.8.tuxcare |
1.5.8-tuxcare.1 |
plexus-utilsTuxCare:AlmaLinux:9.6 |
before 3.3.0-13.el9.tuxcare.els1 | 3.3.0-13.el9.tuxcare.els1 |
plexus-utils-javadocTuxCare:AlmaLinux:9.6 |
before 3.3.0-13.el9.tuxcare.els1 | 3.3.0-13.el9.tuxcare.els1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
3.5.1 up to 3.5.1-tuxcare.1 | 3.5.1-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
1.2 up to 1.2-tuxcare.1 | 1.2-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
2.0.4 up to 2.0.4-tuxcare.1 | 2.0.4-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
3.0.15 up to 3.0.15-tuxcare.1 | 3.0.15-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
3.0.17 up to 3.0.17-tuxcare.1 | 3.0.17-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
3.3.1 up to 3.3.1-tuxcare.1 | 3.3.1-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven From an advisory covering 2 CVEs |
3.0.18 up to 3.0.18-tuxcare.1 | 3.0.18-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
3.2.0 up to 3.2.0-tuxcare.1 | 3.2.0-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
3.0.24 up to 3.0.24-tuxcare.1 | 3.0.24-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
3.4.2 up to 3.4.2-tuxcare.1 | 3.4.2-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
3.0.20 up to 3.0.20-tuxcare.1 | 3.0.20-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
1.5.6 up to 1.5.6-tuxcare.1 | 1.5.6-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
3.2.1 up to 3.2.1-tuxcare.1 | 3.2.1-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
4.0.1 up to 4.0.1-tuxcare.1 | 4.0.1-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
2.1 up to 2.1-tuxcare.1 | 2.1-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
3.0.1 up to 3.0.1-tuxcare.1 | 3.0.1-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
2.0.6 up to 2.0.6-tuxcare.1 | 2.0.6-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
4.0.0 up to 4.0.0-tuxcare.1 | 4.0.0-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
2.0.5 up to 2.0.5-tuxcare.1 | 2.0.5-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
1.5.15 up to 1.5.15-tuxcare.1 | 1.5.15-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
4.0.2 up to 4.0.2-tuxcare.1 | 4.0.2-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
3.4.1 up to 3.4.1-tuxcare.1 | 3.4.1-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven From an advisory covering 3 CVEs |
3.0.22 up to 3.0.22-tuxcare.1 | 3.0.22-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven From an advisory covering 2 CVEs |
1.5.5 up to 1.5.5-tuxcare.1 | 1.5.5-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven From an advisory covering 2 CVEs |
3.0.8 up to 3.0.8-tuxcare.1 | 3.0.8-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
3.1.1 up to 3.1.1-tuxcare.1 | 3.1.1-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
3.3.0 up to 3.3.0-tuxcare.1 | 3.3.0-tuxcare.1 |
org.codehaus.plexus:plexus-utilsTuxCare:Maven |
1.1 up to 1.1-tuxcare.1 | 1.1-tuxcare.1 |
plexus-utils2Debian:12 |
All versions, plus listed versions 3.4.2-1 |
None known |
plexus-utils2Debian:13 |
All versions, plus listed versions 3.4.2-1 |
None known |
plexus-utils2Debian:14 |
All versions, plus listed versions 3.4.2-1 |
None known |
org.codehaus.plexus:plexus-utilsMaven |
4.0.0 up to 4.0.3, plus listed versions 4.0.14.0.2 |
4.0.3 |
org.codehaus.plexus:plexus-utilsMaven |
before 3.6.1, plus listed versions 1.0.41.0.51.11.21.3 Show 45 moreShow less1.41.4-alpha-11.4.11.4.21.4.31.4.41.4.51.4.61.4.71.4.81.4.91.51.5.11.5.101.5.111.5.121.5.131.5.141.5.151.5.21.5.31.5.41.5.51.5.61.5.71.5.81.5.92.0.02.0.12.0.22.0.32.0.42.0.52.0.62.0.72.13.03.0.13.0.103.0.113.0.123.0.133.0.143.0.153.0.16 |
3.6.1 |
org.codehaus.plexus:plexus-utilsRed Hat Lightwell:Maven |
before 4.0.1.rhlw-00001, plus listed versions 1.0.41.0.51.11.21.3 Show 45 moreShow less1.41.4-alpha-11.4.11.4.21.4.31.4.41.4.51.4.61.4.71.4.81.4.91.51.5.11.5.101.5.111.5.121.5.131.5.141.5.151.5.21.5.31.5.41.5.51.5.61.5.71.5.81.5.92.0.02.0.12.0.22.0.32.0.42.0.52.0.62.0.72.13.03.0.13.0.103.0.113.0.123.0.133.0.143.0.153.0.16 |
4.0.1.rhlw-00001 |
eap8-bouncycastleRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:1.84.0-1.redhat_00001.1.el8eap | 0:1.84.0-1.redhat_00001.1.el8eap |
eap8-bouncycastle-jmailRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:1.84.0-1.redhat_00001.1.el8eap | 0:1.84.0-1.redhat_00001.1.el8eap |
eap8-bouncycastle-pgRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:1.84.0-1.redhat_00001.1.el8eap | 0:1.84.0-1.redhat_00001.1.el8eap |
eap8-bouncycastle-pkixRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:1.84.0-1.redhat_00001.1.el8eap | 0:1.84.0-1.redhat_00001.1.el8eap |
eap8-bouncycastle-provRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:1.84.0-1.redhat_00001.1.el8eap | 0:1.84.0-1.redhat_00001.1.el8eap |
eap8-bouncycastle-utilRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:1.84.0-1.redhat_00001.1.el8eap | 0:1.84.0-1.redhat_00001.1.el8eap |
eap8-wildflyRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:8.1.6-5.GA_redhat_00007.1.el8eap | 0:8.1.6-5.GA_redhat_00007.1.el8eap |
eap8-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:8.1.6-5.GA_redhat_00007.1.el8eap | 0:8.1.6-5.GA_redhat_00007.1.el8eap |
eap8-wildfly-java-jdk21Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:8.1.6-5.GA_redhat_00007.1.el8eap | 0:8.1.6-5.GA_redhat_00007.1.el8eap |
eap8-wildfly-modulesRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:8.1.6-5.GA_redhat_00007.1.el8eap | 0:8.1.6-5.GA_redhat_00007.1.el8eap |
eap8-activemq-artemisRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-cliRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-commonsRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-core-clientRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-dtoRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-hornetq-protocolRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-hqclient-protocolRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-jakarta-clientRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-jakarta-raRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-jakarta-serverRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-jakarta-service-extensionsRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-jdbc-storeRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-journalRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-selectorRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-serverRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-angusRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.0.5-1.redhat_00001.1.el8eap | 0:2.0.5-1.redhat_00001.1.el8eap |
eap8-angus-activationRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.0.3-1.redhat_00001.1.el8eap | 0:2.0.3-1.redhat_00001.1.el8eap |
eap8-angus-mailRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.0.5-1.redhat_00001.1.el8eap | 0:2.0.5-1.redhat_00001.1.el8eap |
eap8-eap-product-conf-parentRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:801.6.0-1.GA_redhat_00001.1.el8eap | 0:801.6.0-1.GA_redhat_00001.1.el8eap |
eap8-eap-product-conf-wildfly-ee-feature-packRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:801.6.0-1.GA_redhat_00001.1.el8eap | 0:801.6.0-1.GA_redhat_00001.1.el8eap |
eap8-guavaRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:33.0.0-3.jre_redhat_00004.1.el8eap | 0:33.0.0-3.jre_redhat_00004.1.el8eap |
eap8-guava-failureaccessRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:1.0.3-1.redhat_00001.1.el8eap | 0:1.0.3-1.redhat_00001.1.el8eap |
eap8-guava-librariesRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:33.0.0-3.jre_redhat_00004.1.el8eap | 0:33.0.0-3.jre_redhat_00004.1.el8eap |
eap8-hal-consoleRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:3.7.19-1.Final_redhat_00001.1.el8eap | 0:3.7.19-1.Final_redhat_00001.1.el8eap |
eap8-hibernateRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:6.6.48-1.Final_redhat_00001.1.el8eap | 0:6.6.48-1.Final_redhat_00001.1.el8eap |
eap8-hibernate-coreRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:6.6.48-1.Final_redhat_00001.1.el8eap | 0:6.6.48-1.Final_redhat_00001.1.el8eap |
eap8-hibernate-enversRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:6.6.48-1.Final_redhat_00001.1.el8eap | 0:6.6.48-1.Final_redhat_00001.1.el8eap |
eap8-hibernate-searchRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:7.2.6-1.Final_redhat_00001.1.el8eap | 0:7.2.6-1.Final_redhat_00001.1.el8eap |
eap8-hibernate-search-backend-elasticsearchRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:7.2.6-1.Final_redhat_00001.1.el8eap | 0:7.2.6-1.Final_redhat_00001.1.el8eap |
eap8-hibernate-search-backend-luceneRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:7.2.6-1.Final_redhat_00001.1.el8eap | 0:7.2.6-1.Final_redhat_00001.1.el8eap |
eap8-hibernate-search-engineRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:7.2.6-1.Final_redhat_00001.1.el8eap | 0:7.2.6-1.Final_redhat_00001.1.el8eap |
eap8-hibernate-search-mapper-ormRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:7.2.6-1.Final_redhat_00001.1.el8eap | 0:7.2.6-1.Final_redhat_00001.1.el8eap |
eap8-hibernate-search-mapper-pojo-baseRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:7.2.6-1.Final_redhat_00001.1.el8eap | 0:7.2.6-1.Final_redhat_00001.1.el8eap |
eap8-hibernate-search-util-commonRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:7.2.6-1.Final_redhat_00001.1.el8eap | 0:7.2.6-1.Final_redhat_00001.1.el8eap |
eap8-jakarta-activationRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.1.4-1.redhat_00001.1.el8eap | 0:2.1.4-1.redhat_00001.1.el8eap |
eap8-jboss-loggingRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:3.6.2-1.Final_redhat_00001.1.el8eap | 0:3.6.2-1.Final_redhat_00001.1.el8eap |
eap8-jboss-metadataRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:16.1.0-1.Final_redhat_00001.1.el8eap | 0:16.1.0-1.Final_redhat_00001.1.el8eap |
eap8-jboss-metadata-appclientRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:16.1.0-1.Final_redhat_00001.1.el8eap | 0:16.1.0-1.Final_redhat_00001.1.el8eap |
eap8-jboss-metadata-commonRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:16.1.0-1.Final_redhat_00001.1.el8eap | 0:16.1.0-1.Final_redhat_00001.1.el8eap |
eap8-jboss-metadata-earRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:16.1.0-1.Final_redhat_00001.1.el8eap | 0:16.1.0-1.Final_redhat_00001.1.el8eap |
eap8-jboss-metadata-ejbRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:16.1.0-1.Final_redhat_00001.1.el8eap | 0:16.1.0-1.Final_redhat_00001.1.el8eap |
eap8-jboss-metadata-webRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:16.1.0-1.Final_redhat_00001.1.el8eap | 0:16.1.0-1.Final_redhat_00001.1.el8eap |
eap8-jctoolsRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.0.6-1.redhat_00001.1.el8eap | 0:4.0.6-1.redhat_00001.1.el8eap |
eap8-jctools-coreRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.0.6-1.redhat_00001.1.el8eap | 0:4.0.6-1.redhat_00001.1.el8eap |
eap8-nettyRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-bufferRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-codecRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-codec-dnsRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-codec-httpRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-codec-socksRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-commonRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-handlerRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-handler-proxyRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-resolverRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-resolver-dnsRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-transportRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-transport-classes-epollRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-transport-native-epollRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-transport-native-epoll-debuginfoRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-transport-native-unix-commonRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-plexus-utilsRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:3.6.1-1.redhat_00001.1.el8eap | 0:3.6.1-1.redhat_00001.1.el8eap |
eap8-reactivex-rxjavaRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:3.1.12-1.redhat_00001.1.el8eap | 0:3.1.12-1.redhat_00001.1.el8eap |
eap8-reactivex-rxjava2Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.2.21-5.redhat_00003.1.el8eap | 0:2.2.21-5.redhat_00003.1.el8eap |
eap8-wildfly-client-configRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:1.0.1-4.Final_redhat_00002.1.el8eap | 0:1.0.1-4.Final_redhat_00002.1.el8eap |
eap8-wildfly-http-clientRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.1.4-1.Final_redhat_00001.1.el8eap | 0:2.1.4-1.Final_redhat_00001.1.el8eap |
aopallianceRocky Linux:9 |
before 0:1.0-51.module+el9.7.0+40002+8e3c44a9 | 0:1.0-51.module+el9.7.0+40002+8e3c44a9 |
apache-commons-cliRocky Linux:9 |
before 0:1.9.0-4.module+el9.7.0+40002+8e3c44a9 | 0:1.9.0-4.module+el9.7.0+40002+8e3c44a9 |
apache-commons-codecRocky Linux:9 |
before 0:1.17.1-8.module+el9.7.0+40002+8e3c44a9 | 0:1.17.1-8.module+el9.7.0+40002+8e3c44a9 |
apache-commons-ioRocky Linux:9 |
before 1:2.16.1-9.module+el9.7.0+40002+8e3c44a9 | 1:2.16.1-9.module+el9.7.0+40002+8e3c44a9 |
atinjectRocky Linux:9 |
before 0:1.0.5-14.module+el9.7.0+40002+8e3c44a9 | 0:1.0.5-14.module+el9.7.0+40002+8e3c44a9 |
google-guiceRocky Linux:9 |
before 0:5.1.0-23.module+el9.7.0+40002+8e3c44a9 | 0:5.1.0-23.module+el9.7.0+40002+8e3c44a9 |
guavaRocky Linux:9 |
before 0:33.3.0-5.module+el9.7.0+40002+8e3c44a9 | 0:33.3.0-5.module+el9.7.0+40002+8e3c44a9 |
httpcomponents-clientRocky Linux:9 |
before 0:4.5.14-21.module+el9.7.0+40002+8e3c44a9 | 0:4.5.14-21.module+el9.7.0+40002+8e3c44a9 |
httpcomponents-coreRocky Linux:9 |
before 0:4.4.16-21.module+el9.7.0+40002+8e3c44a9 | 0:4.4.16-21.module+el9.7.0+40002+8e3c44a9 |
jakarta-annotationsRocky Linux:9 |
before 0:1.3.5-38.module+el9.7.0+40002+8e3c44a9 | 0:1.3.5-38.module+el9.7.0+40002+8e3c44a9 |
jansiRocky Linux:9 |
before 0:2.4.1-12.module+el9.7.0+40002+8e3c44a9 | 0:2.4.1-12.module+el9.7.0+40002+8e3c44a9 |
jsr-305Rocky Linux:9 |
before 0:3.0.2-36.module+el9.7.0+40002+8e3c44a9 | 0:3.0.2-36.module+el9.7.0+40002+8e3c44a9 |
mavenRocky Linux:9 |
before 1:3.9.9-13.module+el9.8.0+40095+a2161487 | 1:3.9.9-13.module+el9.8.0+40095+a2161487 |
maven-resolverRocky Linux:9 |
before 1:1.9.22-6.module+el9.7.0+40002+8e3c44a9 | 1:1.9.22-6.module+el9.7.0+40002+8e3c44a9 |
maven-shared-utilsRocky Linux:9 |
before 0:3.4.2-19.module+el9.7.0+40002+8e3c44a9 | 0:3.4.2-19.module+el9.7.0+40002+8e3c44a9 |
maven-wagonRocky Linux:9 |
before 0:3.5.3-17.module+el9.7.0+40002+8e3c44a9 | 0:3.5.3-17.module+el9.7.0+40002+8e3c44a9 |
plexus-cipherRocky Linux:9 |
before 0:2.0-25.module+el9.7.0+40002+8e3c44a9 | 0:2.0-25.module+el9.7.0+40002+8e3c44a9 |
plexus-classworldsRocky Linux:9 |
before 0:2.8.0-9.module+el9.7.0+40002+8e3c44a9 | 0:2.8.0-9.module+el9.7.0+40002+8e3c44a9 |
plexus-containersRocky Linux:9 |
before 0:2.2.0-10.module+el9.7.0+40002+8e3c44a9 | 0:2.2.0-10.module+el9.7.0+40002+8e3c44a9 |
plexus-interpolationRocky Linux:9 |
before 0:1.27-10.module+el9.7.0+40002+8e3c44a9 | 0:1.27-10.module+el9.7.0+40002+8e3c44a9 |
plexus-sec-dispatcherRocky Linux:9 |
before 0:2.0-28.module+el9.7.0+40002+8e3c44a9 | 0:2.0-28.module+el9.7.0+40002+8e3c44a9 |
plexus-utilsRocky Linux:9 |
before 0:3.5.1-17.module+el9.7.0+40002+8e3c44a9 | 0:3.5.1-17.module+el9.7.0+40002+8e3c44a9 |
sisuRocky Linux:9 |
before 1:0.9.0~M3-7.module+el9.7.0+40002+8e3c44a9 | 1:0.9.0~M3-7.module+el9.7.0+40002+8e3c44a9 |
slf4jRocky Linux:9 |
before 0:1.7.36-9.module+el9.7.0+40002+8e3c44a9 | 0:1.7.36-9.module+el9.7.0+40002+8e3c44a9 |
plexus-utilsRocky Linux:10 |
before 0:3.5.1-9.el10_2 | 0:3.5.1-9.el10_2 |
plexus-utilsRocky Linux:9 |
before 0:3.3.0-14.el9_8 | 0:3.3.0-14.el9_8 |
apache-commons-cliRocky Linux:8 |
before 0:1.5.0-5.module+el8.10.0+1811+d28a527b | 0:1.5.0-5.module+el8.10.0+1811+d28a527b |
apache-commons-codecRocky Linux:8 |
before 0:1.15-8.module+el8.10.0+1811+d28a527b | 0:1.15-8.module+el8.10.0+1811+d28a527b |
apache-commons-ioRocky Linux:8 |
before 1:2.11.0-3.module+el8.10.0+1811+d28a527b | 1:2.11.0-3.module+el8.10.0+1811+d28a527b |
apache-commons-lang3Rocky Linux:8 |
before 0:3.12.0-8.module+el8.10.0+1811+d28a527b | 0:3.12.0-8.module+el8.10.0+1811+d28a527b |
atinjectRocky Linux:8 |
before 0:1.0.5-5.module+el8.10.0+1811+d28a527b | 0:1.0.5-5.module+el8.10.0+1811+d28a527b |
cdi-apiRocky Linux:8 |
before 0:2.0.2-7.module+el8.10.0+1811+d28a527b | 0:2.0.2-7.module+el8.10.0+1811+d28a527b |
google-guiceRocky Linux:8 |
before 0:4.2.3-10.module+el8.10.0+1811+d28a527b | 0:4.2.3-10.module+el8.10.0+1811+d28a527b |
guavaRocky Linux:8 |
before 0:31.0.1-5.module+el8.10.0+1811+d28a527b | 0:31.0.1-5.module+el8.10.0+1811+d28a527b |
httpcomponents-clientRocky Linux:8 |
before 0:4.5.13-6.module+el8.10.0+1811+d28a527b | 0:4.5.13-6.module+el8.10.0+1811+d28a527b |
httpcomponents-coreRocky Linux:8 |
before 0:4.4.13-8.module+el8.10.0+1811+d28a527b | 0:4.4.13-8.module+el8.10.0+1811+d28a527b |
jakarta-annotationsRocky Linux:8 |
before 0:1.3.5-15.module+el8.10.0+1811+d28a527b | 0:1.3.5-15.module+el8.10.0+1811+d28a527b |
jansiRocky Linux:8 |
before 0:2.4.0-7.module+el8.10.0+1811+d28a527b | 0:2.4.0-7.module+el8.10.0+1811+d28a527b |
jsr-305Rocky Linux:8 |
before 0:3.0.2-7.module+el8.10.0+1811+d28a527b | 0:3.0.2-7.module+el8.10.0+1811+d28a527b |
mavenRocky Linux:8 |
before 1:3.8.5-6.module+el8.10.0+1811+d28a527b | 1:3.8.5-6.module+el8.10.0+1811+d28a527b |
maven-resolverRocky Linux:8 |
before 1:1.7.3-6.module+el8.10.0+1811+d28a527b | 1:1.7.3-6.module+el8.10.0+1811+d28a527b |
maven-shared-utilsRocky Linux:8 |
before 0:3.3.4-6.module+el8.10.0+1811+d28a527b | 0:3.3.4-6.module+el8.10.0+1811+d28a527b |
maven-wagonRocky Linux:8 |
before 0:3.5.1-3.module+el8.10.0+1811+d28a527b | 0:3.5.1-3.module+el8.10.0+1811+d28a527b |
plexus-cipherRocky Linux:8 |
before 0:2.0-3.module+el8.10.0+1811+d28a527b | 0:2.0-3.module+el8.10.0+1811+d28a527b |
plexus-classworldsRocky Linux:8 |
before 0:2.6.0-13.module+el8.10.0+1811+d28a527b | 0:2.6.0-13.module+el8.10.0+1811+d28a527b |
plexus-containersRocky Linux:8 |
before 0:2.1.1-3.module+el8.10.0+1811+d28a527b | 0:2.1.1-3.module+el8.10.0+1811+d28a527b |
plexus-interpolationRocky Linux:8 |
before 0:1.26-13.module+el8.10.0+1811+d28a527b | 0:1.26-13.module+el8.10.0+1811+d28a527b |
plexus-sec-dispatcherRocky Linux:8 |
before 0:2.0-5.module+el8.10.0+1811+d28a527b | 0:2.0-5.module+el8.10.0+1811+d28a527b |
plexus-utilsRocky Linux:8 |
before 0:3.3.0-11.module+el8.10.0+1811+d28a527b | 0:3.3.0-11.module+el8.10.0+1811+d28a527b |
sisuRocky Linux:8 |
before 1:0.3.5-3.module+el8.10.0+1811+d28a527b | 1:0.3.5-3.module+el8.10.0+1811+d28a527b |
slf4jRocky Linux:8 |
before 0:1.7.32-5.module+el8.10.0+1811+d28a527b | 0:1.7.32-5.module+el8.10.0+1811+d28a527b |
antRocky Linux:8 |
before 0:1.10.5-1.module+el8.3.0+74+855e3f5d | 0:1.10.5-1.module+el8.3.0+74+855e3f5d |
antRocky Linux:8 |
before 0:1.10.5-1.module+el8.10.0+2003+8aeac9cb | 0:1.10.5-1.module+el8.10.0+2003+8aeac9cb |
ant-contribRocky Linux:8 |
before 0:1.0-0.32.b3.module+el8.3.0+74+855e3f5d | 0:1.0-0.32.b3.module+el8.3.0+74+855e3f5d |
antlrRocky Linux:8 |
before 0:2.7.7-56.module+el8.3.0+74+855e3f5d | 0:2.7.7-56.module+el8.3.0+74+855e3f5d |
aopallianceRocky Linux:8 |
before 0:1.0-17.module+el8.6.0+843+5a13dac3 | 0:1.0-17.module+el8.6.0+843+5a13dac3 |
aopallianceRocky Linux:8 |
before 0:1.0-17.module+el8.10.0+2003+8aeac9cb | 0:1.0-17.module+el8.10.0+2003+8aeac9cb |
aopallianceRocky Linux:8 |
before 0:1.0-17.module+el8.3.0+74+855e3f5d | 0:1.0-17.module+el8.3.0+74+855e3f5d |
apache-commons-beanutilsRocky Linux:8 |
before 0:1.9.3-5.module+el8.10.0+2003+8aeac9cb | 0:1.9.3-5.module+el8.10.0+2003+8aeac9cb |
apache-commons-cliRocky Linux:8 |
before 0:1.4-4.module+el8.6.0+843+5a13dac3 | 0:1.4-4.module+el8.6.0+843+5a13dac3 |
apache-commons-cliRocky Linux:8 |
before 0:1.4-4.module+el8.3.0+74+855e3f5d | 0:1.4-4.module+el8.3.0+74+855e3f5d |
apache-commons-cliRocky Linux:8 |
before 0:1.4-4.module+el8.10.0+2003+8aeac9cb | 0:1.4-4.module+el8.10.0+2003+8aeac9cb |
apache-commons-codecRocky Linux:8 |
before 0:1.11-3.module+el8.6.0+843+5a13dac3 | 0:1.11-3.module+el8.6.0+843+5a13dac3 |
apache-commons-codecRocky Linux:8 |
before 0:1.11-3.module+el8.3.0+74+855e3f5d | 0:1.11-3.module+el8.3.0+74+855e3f5d |
apache-commons-codecRocky Linux:8 |
before 0:1.11-3.module+el8.10.0+2003+8aeac9cb | 0:1.11-3.module+el8.10.0+2003+8aeac9cb |
apache-commons-collectionsRocky Linux:8 |
before 0:3.2.2-10.module+el8.10.0+2052+1b0fb438 | 0:3.2.2-10.module+el8.10.0+2052+1b0fb438 |
apache-commons-collectionsRocky Linux:8 |
before 0:3.2.2-10.module+el8.10.0+1763+c7c02164 | 0:3.2.2-10.module+el8.10.0+1763+c7c02164 |
apache-commons-collectionsRocky Linux:8 |
before 0:3.2.2-10.module+el8.3.0+74+855e3f5d | 0:3.2.2-10.module+el8.3.0+74+855e3f5d |
apache-commons-compressRocky Linux:8 |
before 0:1.18-1.module+el8.10.0+2003+8aeac9cb | 0:1.18-1.module+el8.10.0+2003+8aeac9cb |
apache-commons-compressRocky Linux:8 |
before 0:1.18-1.module+el8.3.0+74+855e3f5d | 0:1.18-1.module+el8.3.0+74+855e3f5d |
apache-commons-execRocky Linux:8 |
before 0:1.3-8.module+el8.3.0+74+855e3f5d | 0:1.3-8.module+el8.3.0+74+855e3f5d |
aqute-bndRocky Linux:8 |
before 0:3.5.0-4.module+el8.3.0+74+855e3f5d | 0:3.5.0-4.module+el8.3.0+74+855e3f5d |
apache-commons-ioRocky Linux:8 |
before 1:2.6-3.module+el8.6.0+843+5a13dac3 | 1:2.6-3.module+el8.6.0+843+5a13dac3 |
apache-commons-ioRocky Linux:8 |
before 1:2.6-3.module+el8.10.0+2003+8aeac9cb | 1:2.6-3.module+el8.10.0+2003+8aeac9cb |
apache-commons-ioRocky Linux:8 |
before 1:2.6-3.module+el8.3.0+74+855e3f5d | 1:2.6-3.module+el8.3.0+74+855e3f5d |
org.codehaus.plexus:plexus-utilsRoot:Maven |
before 3.1.1-aikido.1 | 3.1.1-aikido.13.5.0-aikido.24.0.0-aikido.24.0.1-aikido.23.5.1-aikido.43.1.0-aikido.13.6.0-aikido.13.3.0-aikido.13.3.1-aikido.1 |
io.root.org.codehaus.plexus:plexus-utilsRoot:Maven |
before 3.1.1-root.io.1 | 3.1.1-root.io.13.5.1-root.io.14.0.1-root.io.14.0.0-root.io.13.5.0-root.io.13.5.1-root.io.33.5.0-root.io.24.0.0-root.io.24.0.1-root.io.23.5.1-root.io.43.1.0-root.io.13.6.0-root.io.13.3.0-root.io.13.3.1-root.io.1 |
plexus-utilsSUSE:Linux Enterprise Module for Development Tools 15 SP7 |
before 4.0.2-150200.3.14.1 | 4.0.2-150200.3.14.1 |
plexus-utilsSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS |
before 4.0.2-150200.3.14.1 | 4.0.2-150200.3.14.1 |
plexus-utilsSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS |
before 4.0.2-150200.3.14.1 | 4.0.2-150200.3.14.1 |
plexus-utilsSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS |
before 4.0.2-150200.3.14.1 | 4.0.2-150200.3.14.1 |
plexus-utilsSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS |
before 4.0.2-150200.3.14.1 | 4.0.2-150200.3.14.1 |
plexus-utilsSUSE:Linux Enterprise Server 15 SP4-LTSS |
before 4.0.2-150200.3.14.1 | 4.0.2-150200.3.14.1 |
plexus-utilsSUSE:Linux Enterprise Server 15 SP5-LTSS |
before 4.0.2-150200.3.14.1 | 4.0.2-150200.3.14.1 |
plexus-utilsSUSE:Linux Enterprise Server 15 SP6-LTSS |
before 4.0.2-150200.3.14.1 | 4.0.2-150200.3.14.1 |
plexus-utilsSUSE:Linux Enterprise Server for SAP Applications 15 SP4 |
before 4.0.2-150200.3.14.1 | 4.0.2-150200.3.14.1 |
plexus-utilsSUSE:Linux Enterprise Server for SAP Applications 15 SP5 |
before 4.0.2-150200.3.14.1 | 4.0.2-150200.3.14.1 |
plexus-utilsSUSE:Linux Enterprise Server for SAP Applications 15 SP6 |
before 4.0.2-150200.3.14.1 | 4.0.2-150200.3.14.1 |
plexus-utilsopenSUSE:Leap 15.6 |
before 4.0.2-150200.3.14.1 | 4.0.2-150200.3.14.1 |
plexus-utilsSUSE:Linux Enterprise Server 16.0 |
before 4.0.2-160000.3.1 | 4.0.2-160000.3.1 |
plexus-utilsSUSE:Linux Enterprise Server for SAP applications 16.0 |
before 4.0.2-160000.3.1 | 4.0.2-160000.3.1 |
plexus-utilsUbuntu:14.04:LTS |
All versions, plus listed versions 1:1.5.15-41:1.5.15-4+deb8u1build0.14.04.1 |
None known |
plexus-utils2Ubuntu:14.04:LTS |
All versions, plus listed versions 2.0.5-12.0.5-1+deb7u1build0.14.04.1 |
None known |
plexus-utilsUbuntu:16.04:LTS |
All versions, plus listed versions 1:1.5.15-41:1.5.15-4+deb8u1build0.16.04.1 |
None known |
plexus-utils2Ubuntu:16.04:LTS |
All versions, plus listed versions 3.0.15-13.0.22-1 |
None known |
plexus-utilsUbuntu:18.04:LTS |
All versions, plus listed versions 1:1.5.15-41:1.5.15-5 |
None known |
plexus-utils2Ubuntu:18.04:LTS |
All versions, plus listed versions 3.0.24-3 |
None known |
plexus-utils2Ubuntu:20.04:LTS |
All versions, plus listed versions 3.2.1-1build23.3.0-1 |
None known |
plexus-utils2Ubuntu:22.04:LTS |
All versions, plus listed versions 3.3.0-1 |
None known |
plexus-utils2Ubuntu:24.04:LTS |
All versions, plus listed versions 3.4.2-1 |
None known |
plexus-utils2Ubuntu:26.10 |
All versions, plus listed versions 3.4.2-1build1 |
None known |
plexus-utils2Ubuntu:26.04:LTS |
All versions, plus listed versions 3.4.2-13.4.2-1build1 |
None known |
plexus-utilsopenSUSE:Tumbleweed |
before 4.0.2-2.1 | 4.0.2-2.1 |
plexus-utilsopenSUSE:Leap 16.0 |
before 4.0.2-160000.3.1 | 4.0.2-160000.3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| affected, aliases | OSV | |
| affected, aliases, facts | OSV | |
| affected | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-67030 is a high vulnerability (CVSS 8.8) in Codehaus-plexus Plexus-utils, published March 25, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.69%, the 52nd percentile. Fixed in org.codehaus.plexus:plexus-utils 4.0.3.
References
github.com/codehaus-plexus/plexus-utils/pull/295
gist.github.com/weaver4VD/3216dac645220f8c9b488362f61241ec
access.redhat.com/security/cve/CVE-2025-67030
Show 175 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=2451409
security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-67030.json
nvd.nist.gov/vuln/detail/CVE-2025-67030
errata.almalinux.org/9/ALSA-2026-38500.html
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1777038119.html
security-tracker.debian.org/tracker/CVE-2025-67030
docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1
issues.redhat.com/browse/JBEAP-29032
cve.org/CVERecord?id=CVE-2025-14813
gruppotim.it/it/footer/red-team.html
lists.apache.org/thread/jwpsdc8tdxotm98od8n8n30fqlzoc8gg
mogwailabs.de/en/blog/2025/02/c3p0-you-little-rascal
mchange.com/projects/c3p0
w4ke.info/2025/06/18/funky-chunks.html
rfc-editor.org/rfc/rfc9110
errata.rockylinux.org/RLSA-2026:38500
suse.com/support/update/announcement/2026/suse-su-20261396-1
bugzilla.suse.com/1260588
ubuntu.com/security/CVE-2025-67030
This page doesn't list everything
Left out here: 778 package rows and 60 versions. The JSON record has them. Also not on the record: 763 package claims. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 21 source records.