net.sourceforge.pmd:pmd-core vulnerabilities (Maven)

3 vulnerabilities.

• net.sourceforge.pmd:pmd-core Maven PMD Designer has Stored XSS in VBHTMLRenderer and YAHTMLRenderer via unescaped violation messages CVE-2026-28338 Fix available 6.8 MediumFebruary 27, 2026
• net.sourceforge.pmd:pmd-core Maven PMD Designer's release key passphrase (GPG) available on Maven Central in cleartext CVE-2025-23215 Fix available 9.3 CriticalJanuary 31, 2025
• net.sourceforge.pmd:pmd-core Maven Improper Restriction of XML External Entity Reference in PMD CVE-2019-7722 Fix available 8.1 HighFebruary 11, 2019