Skip to content
Apache Maven vulnerabilities
-
@nx gradle, maven, nrwl nx +2 more
Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradle
CVE-2026-119282
Fix available
7.3 High
-
apache maven archetype, apache software foundation maven archetype plugin +1 more
Maven Archetype Plugin: Maven Archetype integration-test may package local settings into the published artifact, possibly containing credentials
CVE-2024-47197
Fix available
7.5 High
-
apache software foundation maven, apache maven shared utils, debian linux +2 more
Commandline class shell injection vulnerabilities
CVE-2022-29599
Fix available
9.8 Critical
-
apache maven, oracle financial services analytical applications infrastructure, goldengate big data and application adapters +1 more +3 more
block repositories using http by default
CVE-2021-26291
Public exploitFix available
9.1 Critical
-
apache maven
The default configuration of Apache Maven 3.0.4, when using Maven Wagon 2.1, disables SSL...
CVE-2013-0253
Fix available
5.8 Medium