org.codehaus.plexus:plexus-utils vulnerabilities (Maven)

4 vulnerabilities.

• org.codehaus.plexus:plexus-utils Maven Plexus-Utils has a Directory Traversal vulnerability in its extractFile method CVE-2025-67030 Fix available 8.8 HighMarch 25, 2026
• org.codehaus.plexus:plexus-utils Maven Codehaus-plexus: xml external entity (xxe) injection CVE-2022-4245 Fix available 4.3 MediumSeptember 25, 2023
• org.codehaus.plexus:plexus-utils Maven Codehaus-plexus: directory traversal CVE-2022-4244 Public exploitFix available 7.5 HighSeptember 25, 2023
• org.codehaus.plexus:plexus-utils Maven OS Command Injection in Plexus-utils CVE-2017-1000487 Public exploitFix available 9.8 CriticalJanuary 3, 2018