Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.codehaus.plexus/plexus-utils@2.0.5
purl pkg:maven/org.codehaus.plexus/plexus-utils@2.0.5
Next non-vulnerable version 3.6.1
Latest non-vulnerable version 4.0.3
Risk score 4.4
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
CVE-2017-1000487

Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.
3.0.16
Vulnerable
3.0.17
Vulnerable
3.0.20
Vulnerable
3.0.22
Vulnerable
3.0.24
Vulnerable
3.1.0
Vulnerable
3.1.1
Vulnerable
3.2.0
Vulnerable
3.2.1
Vulnerable
3.3.0
Vulnerable
GHSA-8vhq-qq4p-grq3
Aliases:
CVE-2017-1000487
OS Command Injection in Plexus-utils Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the …
3.0.16
Vulnerable
GHSA-jcwr-x25h-x5fh
Aliases:
CVE-2022-4245
codehaus-plexus vulnerable to XML injection A flaw was found in codehaus-plexus. The `org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment` fails to sanitize comments for a `-->` …
3.0.24
Vulnerable
GHSA-g6ph-x5wf-g337
Aliases:
CVE-2022-4244
plexus-codehaus vulnerable to directory traversal A flaw was found in plexus-codehaus. A directory traversal attack (also known as path traversal) …
3.0.24
Vulnerable
GHSA-6fmv-xxpf-w3cw
Aliases:
CVE-2025-67030
Plexus-Utils has a Directory Traversal vulnerability in its extractFile method Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in …
3.6.1
Not vulnerable
This package is not known to fix any advisories.