org.codehaus.plexus:plexus-archiver vulnerabilities (Maven)

2 vulnerabilities.

• org.codehaus.plexus:plexus-archiver Maven Plexus Archiver vulnerable to Arbitrary File Creation in AbstractUnArchiver CVE-2023-37460 Public exploitFix available 8.1 HighJuly 25, 2023
• org.codehaus.plexus:plexus-archiver Maven Improper Limitation of a Pathname to a Restricted Directory in plexus-archiver CVE-2018-1002200 Public exploitFix available EPSS 11.6% 5.5 MediumJune 12, 2018