Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

org.codehaus.plexus:plexus-utils

Ecosystem:
maven
Package URL:
pkg:maven/org.codehaus.plexus:plexus-utils
Total PRs:
149 Dependabot PRs
Latest PR:
20 days ago
Unique Repositories:
106 repositories
Unique Repos (30 days):
3 repositories
Security Advisories
plexus-codehaus vulnerable to directory traversal
GHSA-g6ph-x5wf-g337 CVE-2022-4244 HIGH published almost 3 years ago • updated about 7 hours ago
A flaw was found in plexus-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outsid...
Plexus-Utils has a Directory Traversal vulnerability in its extractFile method
GHSA-6fmv-xxpf-w3cw CVE-2025-67030 HIGH published 4 months ago • updated 8 days ago
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0...
codehaus-plexus vulnerable to XML injection
GHSA-jcwr-x25h-x5fh CVE-2022-4245 MODERATE published almost 3 years ago • updated 15 days ago
A flaw was found in codehaus-plexus. The `org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment` fails to sanitize comments for a `-->` sequence....
OS Command Injection in Plexus-utils
GHSA-8vhq-qq4p-grq3 CVE-2017-1000487 CRITICAL published about 4 years ago • updated about 1 month ago
Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.
Recent PRs (filtered by: Closed , Major PRs )
RSS Feed Clear filter
build(deps): bump org.codehaus.plexus:plexus-utils from 3.5.0 to 4.0.3 in /mockserver-maven-plugin

mock-server/mockserver-monorepo #2078

3.5.0 → 4.0.3 Major PR
Closed 3 months ago 4 comments
mock-server
deps: Bump org.codehaus.plexus:plexus-utils from 3.6.1 to 4.0.3

arconia-io/arconia #193

3.6.1 → 4.0.3 Major PR
Closed 3 months ago 2 comments
arconia-io
Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 4.0.3 in /graal-native-image-test in the maven group across 1 directory

onyorset/gson #1

3.5.1 → 4.0.3 Major PR
Closed 4 months ago 1 comment
onyorset
Bump org.codehaus.plexus:plexus-utils from 3.3.0 to 4.0.3 in /aws-java-sdk-codegen-maven-plugin in the maven group across 1 directory

AKJUS/aws-sdk-java #18

3.3.0 → 4.0.3 Major PR
Closed 4 months ago 2 comments
AKJUS
Bump the maven group across 2 directories with 3 updates

idgrou/sakai #9

3.5.1 → 4.0.3 Major PR
Closed 4 months ago 2 comments
idgrou
build(deps): bump org.codehaus.plexus:plexus-utils from 3.6.0 to 4.0.3 in /eo-maven-plugin

objectionary/eo #4963

3.6.0 → 4.0.3 Major PR
Closed 4 months ago 1 comment
objectionary
Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 4.0.3 in /modules/openapi-generator-maven-plugin in the maven group across 1 directory

DaxServer/openapi-generator #33

3.5.1 → 4.0.3 Major PR
Closed 4 months ago 1 comment
DaxServer
Bump org.codehaus.plexus:plexus-utils from 3.0.24 to 4.0.3 in /license-maven-plugin/src/test/resources/check in the maven group across 1 directory

mathieucarbou/license-maven-plugin #1041

3.0.24 → 4.0.3 Major PR
Closed 4 months ago 1 comment
mathieucarbou
Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 4.0.3

mojohaus/webstart #171

3.5.1 → 4.0.3 Major PR
Closed 4 months ago 1 comment
mojohaus
Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 4.0.3 in the maven group across 1 directory

cquoss/maven-doxia #1

3.5.1 → 4.0.3 Major PR
Closed 4 months ago 1 comment
cquoss
Bump the maven group across 2 directories with 2 updates

saytyarnorngloreia/dubbo #3

3.6.0 → 4.0.3 Major PR
Closed 4 months ago 1 comment
saytyarnorngloreia
Bump org.codehaus.plexus:plexus-utils from 3.3.0 to 4.0.3 in /idm-framework-src in the maven group across 1 directory

ThalesGroup/identity-management-framework #37

3.3.0 → 4.0.3 Major PR
Closed 4 months ago 1 comment
ThalesGroup
Bump the maven group across 2 directories with 1 update

levonk/maven #2

3.0.22 → 4.0.3 Major PR
Closed 4 months ago 1 comment
levonk
Bump org.codehaus.plexus:plexus-utils from 3.0.14 to 4.0.3 in /contrib/thrift-maven-plugin

Sammons/thrift #1

3.0.14 → 4.0.3 Major PR
Closed 4 months ago 1 comment
Sammons
Bump the maven group across 3 directories with 1 update

dultsch/errai #8

1.4.9 → 4.0.3 Major PR
Closed 4 months ago 1 comment
dultsch
[tomee-10.x]: Bump org.codehaus.plexus:plexus-utils from 3.0.10 to 4.0.2

apache/tomee #2357

3.0.10 → 4.0.2 Major PR
Closed 8 months ago 1 comment
apache
Bump org.codehaus.plexus:plexus-utils from 3.6.0 to 4.0.2

apache/maven-archiver #303

3.6.0 → 4.0.2 Major PR
Closed 11 months ago 1 comment
apache
Bump org.codehaus.plexus:plexus-utils from 3.6.0 to 4.0.2

apache/maven-resolver #1552

3.6.0 → 4.0.2 Major PR
Closed 11 months ago 1 comment
apache
Bump org.codehaus.plexus:plexus-utils from 3.6.0 to 4.0.2

maveniverse/bom-builder-maven-plugin #24

3.6.0 → 4.0.2 Major PR
Closed 12 months ago 1 comment
maveniverse
Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 4.0.2

apache/maven-fluido-skin #308

3.5.1 → 4.0.2 Major PR
Closed about 1 year ago 1 comment
apache
Bump org.codehaus.plexus:plexus-utils from 3.6.0 to 4.0.2

apache/maven-resolver #1507

3.6.0 → 4.0.2 Major PR
Closed about 1 year ago
apache
Bump org.codehaus.plexus:plexus-utils from 3.6.0 to 4.0.2

apache/pinot #16048

3.6.0 → 4.0.2 Major PR
Closed about 1 year ago 1 comment
apache
Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 4.0.2

eclipse-tycho/tycho #5005

3.5.1 → 4.0.2 Major PR
Closed about 1 year ago 1 comment
eclipse-tycho
Bump org.codehaus.plexus:plexus-utils from 3.1.0 to 4.0.2

apache/maven-linkcheck-plugin #9

3.1.0 → 4.0.2 Major PR
Closed about 1 year ago 1 comment
apache
Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 4.0.2

apache/maven-source-plugin #65

3.5.1 → 4.0.2 Major PR
Closed over 1 year ago 2 comments
apache
Bump org.codehaus.plexus:plexus-utils from 3.4.2 to 4.0.2

MaxMood96/jetty.project #999

3.4.2 → 4.0.2 Major PR
Closed almost 2 years ago 3 comments
MaxMood96
Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 4.0.1

apache/maven-ear-plugin #117

3.5.1 → 4.0.1 Major PR
Closed almost 2 years ago 2 comments
apache
Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 4.0.0

apache/maven-shade-plugin #238

3.5.1 → 4.0.0 Major PR
Closed almost 2 years ago 1 comment
apache
Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 4.0.1

hazelcast/hazelcast-cloud-maven-plugin #64

3.5.1 → 4.0.1 Major PR
Closed over 2 years ago 2 comments
hazelcast
Bump org.codehaus.plexus:plexus-utils from 1.5.15 to 3.0.24

acidburn0zzz/maven-plugins-1 #5

1.5.15 → 3.0.24 Major PR
Closed almost 3 years ago 1 comment
acidburn0zzz
Bump org.codehaus.plexus:plexus-utils from 1.5.1 to 3.0.24 in /Maven_Challenge/multi1

jfrog/DevRel #20

1.5.1 → 3.0.24 Major PR
Closed almost 3 years ago 1 comment
jfrog
Bump org.codehaus.plexus:plexus-utils from 1.4.9 to 3.0.24 in /modules/parent

wso2/wso2-axis2 #279

1.4.9 → 3.0.24 Major PR
Closed almost 3 years ago 1 comment
wso2
Bump org.codehaus.plexus:plexus-utils from 1.0.4 to 3.0.24 in /surefire-its/src/test/resources/plexus-conflict

Mattlk13/maven-surefire #41

1.0.4 → 3.0.24 Major PR
Closed almost 3 years ago 1 comment
Mattlk13
Package Details
Name: org.codehaus.plexus:plexus-utils
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/org.codehaus.plexus:plexus-utils
JSON API: View JSON
Security Advisories

4

Active advisories
CRITICAL 1
HIGH 2
MODERATE 1
View All maven Advisories
Package Information
Description:

A collection of various utility classes to ease working with strings, files, command lines and more.

Repository: https://github.com/codehaus-plexus/plexus-utils
Homepage: https://codehaus-plexus.github.io/plexus-utils/
Latest Release: 4.0.2
almost 2 years ago
Dependent Repos: 13,438
Dependent Packages: 3,187
Ranking: Top 0.0643% by dependent repos Top 0.0216% by dependent pkgs
PR Status
Open 71 (47.7%)
Merged 11 (7.4%)
Closed 57 (38.3%)
PR Types
Major 73 (49.0%)
Minor 22 (14.8%)
Patch 43 (28.9%)