plexus-velocity vulnerabilities (SUSE)

4 vulnerabilities.

• plexus-velocity SUSE Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write CVE-2026-78254 Fix available 7.4 HighSeptember 7, 2026
• plexus-velocity SUSE Jakarta Mail vulnerable to SMTP Injection CVE-2025-7962 Fix available 6.0 MediumJuly 21, 2025
• plexus-velocity SUSE Apache Ant ZIP, and ZIP based, archive denial of service vulerability CVE-2021-36374 Fix available 5.5 MediumJuly 14, 2021
• plexus-velocity SUSE Velocity Sandbox Bypass CVE-2020-13936 Fix available EPSS 22.7% 8.8 HighMarch 10, 2021