{"id":"CVE-2022-4245","aliases":["CLSA-2024-1733961633","CLSA-2026-1791931359","CLSA-2026-1791960018","CLSA-2026-1791965617","CLSA-2026-1791965620","CLSA-2026-1791965626","CLSA-2026-1791965636","CLSA-2026-1791965637","CLSA-2026-1793127450","CLSA-2026-1793136969","CLSA-2026-1793136993","CLSA-2026-1793137156","CLSA-2026-1793137245","CLSA-2026-1793729709","CLSA-2026-1793827583","DEBIAN-CVE-2022-4245","EUVD-2023-2535","GHSA-jcwr-x25h-x5fh","UBUNTU-CVE-2022-4245"],"status":"published","title":"Codehaus-plexus: xml external entity (xxe) injection","description":"A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --\u003e sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00694,"percentile":0.53202,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-611","CWE-91"],"published":"2023-09-25T19:20:57Z","modified":"2026-11-05T01:00:02Z","fixes":[{"ecosystem":"Maven","package":"org.codehaus.plexus:plexus-utils","fixed_in":["3.0.24"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:Maven","package":"org.codehaus.plexus:plexus-utils","fixed_in":["3.0.18-tuxcare.2","3.0.15-tuxcare.2","3.0.17-tuxcare.2","2.0.4-tuxcare.2","1.5.6-tuxcare.2","2.0.5-tuxcare.2","2.0.6-tuxcare.2","3.0.1-tuxcare.2","3.0.20-tuxcare.2","1.5.15-tuxcare.2","2.1-tuxcare.2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"plexus-utils2","fixed_in":["3.0.24-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"plexus-utils2","fixed_in":["3.0.24-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"plexus-utils2","fixed_in":["3.0.24-1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.codehaus.plexus:plexus-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.24"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.codehaus.plexus:plexus-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.5.8"},{"fixed":"1.5.8.tuxcare"}]}],"versions":["1.5.8"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.codehaus.plexus:plexus-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.22"},{"fixed":"3.0.22-tuxcare.1"}]}],"versions":["3.0.22"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.codehaus.plexus:plexus-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.5.5"},{"fixed":"1.5.5-tuxcare.1"}]}],"versions":["1.5.5"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.codehaus.plexus:plexus-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.18"},{"fixed":"3.0.18-tuxcare.2"}]}],"versions":["3.0.18","3.0.18-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.codehaus.plexus:plexus-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.15"},{"fixed":"3.0.15-tuxcare.2"}]}],"versions":["3.0.15","3.0.15-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.codehaus.plexus:plexus-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.17"},{"fixed":"3.0.17-tuxcare.2"}]}],"versions":["3.0.17","3.0.17-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.codehaus.plexus:plexus-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.4"},{"fixed":"2.0.4-tuxcare.2"}]}],"versions":["2.0.4","2.0.4-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.codehaus.plexus:plexus-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.5.6"},{"fixed":"1.5.6-tuxcare.2"}]}],"versions":["1.5.6","1.5.6-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.codehaus.plexus:plexus-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.8"},{"fixed":"3.0.8-tuxcare.1"}]}],"versions":["3.0.8"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.codehaus.plexus:plexus-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.5"},{"fixed":"2.0.5-tuxcare.2"}]}],"versions":["2.0.5","2.0.5-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.codehaus.plexus:plexus-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.6"},{"fixed":"2.0.6-tuxcare.2"}]}],"versions":["2.0.6","2.0.6-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.codehaus.plexus:plexus-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.1"},{"fixed":"3.0.1-tuxcare.2"}]}],"versions":["3.0.1","3.0.1-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.codehaus.plexus:plexus-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.20"},{"fixed":"3.0.20-tuxcare.2"}]}],"versions":["3.0.20","3.0.20-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.codehaus.plexus:plexus-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.5.15"},{"fixed":"1.5.15-tuxcare.2"}]}],"versions":["1.5.15","1.5.15-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.codehaus.plexus:plexus-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1"},{"fixed":"2.1-tuxcare.2"}]}],"versions":["2.1","2.1-tuxcare.1"]},{"source":"osv","ecosystem":"Debian:12","package":"plexus-utils2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.24-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"plexus-utils2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.24-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"plexus-utils2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.24-1"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.codehaus.plexus:plexus-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.24"}]}],"versions":["1.0.4","1.0.5","1.1","1.2","1.3","1.4","1.4-alpha-1","1.4.1","1.4.2","1.4.3","1.4.4","1.4.5","1.4.6","1.4.7","1.4.8","1.4.9","1.5","1.5.1","1.5.10","1.5.11","1.5.12","1.5.13","1.5.14","1.5.15","1.5.2","1.5.3","1.5.4","1.5.5","1.5.6","1.5.7","1.5.8","1.5.9","2.0.0","2.0.1","2.0.2","2.0.3","2.0.4","2.0.5","2.0.6","2.0.7","2.1","3.0","3.0.1","3.0.10","3.0.11","3.0.12","3.0.13","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.2","3.0.20","3.0.21","3.0.22","3.0.23","3.0.3","3.0.4","3.0.5","3.0.6","3.0.7","3.0.8","3.0.9"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"plexus-utils2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.5-1","2.0.5-1+deb7u1build0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"plexus-utils2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.15-1","3.0.22-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"plexus-utils2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.24-3"]}],"products":[{"vendor":"codehaus-plexus","product":"plexus-utils"},{"vendor":"red hat","product":"a-mq clients 2"},{"vendor":"red hat","product":"red hat a-mq online"},{"vendor":"red hat","product":"red hat build of apache camel for spring boot"},{"vendor":"red hat","product":"red hat build of quarkus"},{"vendor":"red hat","product":"red hat data grid 8"},{"vendor":"red hat","product":"red hat decision manager 7"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat integration camel quarkus"},{"vendor":"red hat","product":"red hat integration change data capture"},{"vendor":"red hat","product":"red hat integration service registry"},{"vendor":"red hat","product":"red hat jboss a-mq 7"},{"vendor":"red hat","product":"red hat jboss data grid 7"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 6"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 7"},{"vendor":"red hat","product":"red hat jboss enterprise application platform expansion pack"},{"vendor":"red hat","product":"red hat jboss fuse 6"},{"vendor":"red hat","product":"red hat jboss fuse 7"},{"vendor":"red hat","product":"red hat jboss fuse service works 6"},{"vendor":"red hat","product":"red hat jboss web server 3"},{"vendor":"red hat","product":"red hat jboss web server 5"},{"vendor":"red hat","product":"red hat openshift application runtimes"},{"vendor":"red hat","product":"red hat process automation 7"},{"vendor":"red hat","product":"red hat single sign-on 7"},{"vendor":"red hat","product":"red hat software collections"},{"vendor":"red hat","product":"red hat support for spring boot"},{"vendor":"red hat","product":"rhint camel-k-1.10.1"},{"vendor":"red hat","product":"rhpam 7.13.1 async"},{"vendor":"redhat","product":"integration_camel_k"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2023:2135","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2023:3906","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-4245","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2149843","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","Third Party Advisory","report","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4245","tags":["advisory"]},{"url":"https://github.com/codehaus-plexus/plexus-utils/issues/3","tags":["web","report"]},{"url":"https://github.com/codehaus-plexus/plexus-utils/commit/f933e5e78dc2637e485447ed821fe14904f110de","tags":["web","report"]},{"url":"https://security.snyk.io/vuln/SNYK-JAVA-ORGCODEHAUSPLEXUS-461102","tags":["web","report"]},{"url":"https://github.com/advisories/GHSA-jcwr-x25h-x5fh"},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/4xxx/CVE-2022-4245.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-4245","tags":["advisory"]},{"url":"https://github.com/codehaus-plexus/plexus-utils","tags":["package"]},{"url":"https://ubuntu.com/security/CVE-2022-4245","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-4245","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-4245","title":"Codehaus-plexus: xml external entity (xxe) injection","description":"A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --\u003e sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.","status":"published","published":"2023-09-25T19:20:57.329Z","modified":"2024-08-03T01:34:49.896Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-91"],"updated_at":"2026-11-02T14:34:37.599536Z"}],"euvd":[{"id":"EUVD-2023-2535","description":"A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --\u003e sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.","status":"published","published":"2023-09-25T19:20:57Z","modified":"2024-08-03T01:34:49Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T03:25:56.529973Z"}],"ghsa":[{"id":"GHSA-jcwr-x25h-x5fh","title":"codehaus-plexus vulnerable to XML injection","description":"A flaw was found in codehaus-plexus. The `org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment` fails to sanitize comments for a `--\u003e` sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection. ","status":"published","published":"2023-09-25T21:30:26Z","modified":"2024-05-03T20:26:14Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-91","CWE-611"],"updated_at":"2026-11-02T14:37:48.08826Z"}],"nvd":[{"id":"CVE-2022-4245","description":"A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --\u003e sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.","status":"published","published":"2023-09-25T20:15:10.4Z","modified":"2026-06-17T05:20:21.833Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-91","CWE-611"],"updated_at":"2026-11-02T14:07:39.811118Z"}],"osv":[{"id":"CVE-2022-4245","title":"Codehaus-plexus: xml external entity (xxe) injection","description":"A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --\u003e sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.","status":"published","published":"2023-09-25T19:20:57.329Z","modified":"2026-10-28T02:30:56.15686638Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-91"],"updated_at":"2026-11-02T15:44:27.186787Z"},{"id":"GHSA-jcwr-x25h-x5fh","title":"codehaus-plexus vulnerable to XML injection","description":"A flaw was found in codehaus-plexus. The `org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment` fails to sanitize comments for a `--\u003e` sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection. ","status":"published","published":"2023-09-25T21:30:26Z","modified":"2024-05-03T20:32:52.547057Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-611","CWE-91"],"updated_at":"2026-11-02T15:46:50.336262Z"},{"id":"UBUNTU-CVE-2022-4245","description":"A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --\u003e sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.","status":"published","published":"2023-09-25T20:15:00Z","modified":"2025-10-24T04:53:17Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:53:55.502114Z"},{"id":"CLSA-2024-1733961633","title":"TuxCare security update for org.codehaus.plexus:plexus-utils (3 CVEs)","description":"TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 3 CVEs. Fixed in 1.5.8.tuxcare.","status":"published","published":"2026-08-04T14:52:03Z","modified":"2026-10-15T09:45:05.22206577Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2026-1791931359","title":"TuxCare security update for org.codehaus.plexus:plexus-utils (3 CVEs)","description":"TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 3 CVEs. Fixed in 3.0.22-tuxcare.1.","status":"published","published":"2026-10-13T22:42:39Z","modified":"2026-10-27T13:43:09.938010553Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"CLSA-2026-1791960018","title":"TuxCare security update for org.codehaus.plexus:plexus-utils (2 CVEs)","description":"TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 2 CVEs. Fixed in 1.5.5-tuxcare.1.","status":"published","published":"2026-10-14T06:40:18Z","modified":"2026-10-15T09:45:54.182952669Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"CLSA-2026-1791965617","title":"TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)","description":"TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.0.18-tuxcare.2.","status":"published","published":"2026-10-14T08:13:37Z","modified":"2026-10-15T09:45:55.237349449Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"CLSA-2026-1791965620","title":"TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)","description":"TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.0.15-tuxcare.2.","status":"published","published":"2026-10-14T08:13:40Z","modified":"2026-10-15T09:45:55.085337486Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"CLSA-2026-1791965626","title":"TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)","description":"TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.0.17-tuxcare.2.","status":"published","published":"2026-10-14T08:13:46Z","modified":"2026-10-15T09:47:34.70748877Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"CLSA-2026-1791965636","title":"TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)","description":"TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 2.0.4-tuxcare.2.","status":"published","published":"2026-10-14T08:13:56Z","modified":"2026-10-15T09:45:54.231382786Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"CLSA-2026-1791965637","title":"TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)","description":"TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 1.5.6-tuxcare.2.","status":"published","published":"2026-10-14T08:13:57Z","modified":"2026-10-15T09:45:53.433334516Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"CLSA-2026-1793127450","title":"TuxCare security update for org.codehaus.plexus:plexus-utils (2 CVEs)","description":"TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 2 CVEs. Fixed in 3.0.8-tuxcare.1.","status":"published","published":"2026-10-27T18:57:30Z","modified":"2026-10-28T01:45:02.456974919Z","updated_at":"2026-11-02T15:43:55.34846Z"},{"id":"CLSA-2026-1793136969","title":"TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)","description":"TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 2.0.5-tuxcare.2.","status":"published","published":"2026-10-27T21:36:09Z","modified":"2026-10-28T01:45:04.84755003Z","updated_at":"2026-11-02T15:43:55.34846Z"},{"id":"CLSA-2026-1793136993","title":"TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)","description":"TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 2.0.6-tuxcare.2.","status":"published","published":"2026-10-27T21:36:33Z","modified":"2026-10-28T01:45:05.148515887Z","updated_at":"2026-11-02T15:43:55.34846Z"},{"id":"CLSA-2026-1793137156","title":"TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)","description":"TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.0.1-tuxcare.2.","status":"published","published":"2026-10-27T21:39:16Z","modified":"2026-10-28T01:45:04.51283975Z","updated_at":"2026-11-02T15:43:55.34846Z"},{"id":"CLSA-2026-1793137245","title":"TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)","description":"TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.0.20-tuxcare.2.","status":"published","published":"2026-10-27T21:40:45Z","modified":"2026-10-28T01:45:03.111143128Z","updated_at":"2026-11-02T15:43:55.34846Z"},{"id":"CLSA-2026-1793729709","title":"TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)","description":"TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 1.5.15-tuxcare.2.","status":"published","published":"2026-11-03T19:15:10Z","modified":"2026-11-04T02:30:03.524585536Z","updated_at":"2026-11-04T02:55:01.518827Z"},{"id":"CLSA-2026-1793827583","title":"TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)","description":"TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 2.1-tuxcare.2.","status":"published","published":"2026-11-04T22:26:23Z","modified":"2026-11-05T01:00:02.604977535Z","updated_at":"2026-11-05T01:12:05.565404Z"},{"id":"DEBIAN-CVE-2022-4245","description":"A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --\u003e sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.","status":"published","published":"2023-09-25T20:15:10.4Z","modified":"2026-11-03T06:03:12.607960326Z","updated_at":"2026-11-03T06:42:33.899035Z"}]}}