Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0
purl pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0
Next non-vulnerable version 3.6.1
Latest non-vulnerable version 4.0.3
Risk score
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-6fmv-xxpf-w3cw
Aliases:
CVE-2025-67030
Plexus-Utils has a Directory Traversal vulnerability in its extractFile method Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in …
3.6.1
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2017-1000487
Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.