Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.codehaus.plexus/plexus-utils@1.5.3
purl pkg:maven/org.codehaus.plexus/plexus-utils@1.5.3
Next non-vulnerable version 3.6.1
Latest non-vulnerable version 4.0.3
Risk score 4.4
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
GHSA-8vhq-qq4p-grq3
Aliases:
CVE-2017-1000487
OS Command Injection in Plexus-utils Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the …
3.0.16
Vulnerable
GHSA-jcwr-x25h-x5fh
Aliases:
CVE-2022-4245
codehaus-plexus vulnerable to XML injection A flaw was found in codehaus-plexus. The `org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment` fails to sanitize comments for a `-->` …
3.0.24
Vulnerable
GHSA-g6ph-x5wf-g337
Aliases:
CVE-2022-4244
plexus-codehaus vulnerable to directory traversal A flaw was found in plexus-codehaus. A directory traversal attack (also known as path traversal) …
3.0.24
Vulnerable
GHSA-6fmv-xxpf-w3cw
Aliases:
CVE-2025-67030
Plexus-Utils has a Directory Traversal vulnerability in its extractFile method Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in …
3.6.1
Not vulnerable
This package is not known to fix any advisories.