Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

org.codehaus.plexus:plexus-utils

Ecosystem:
maven
Package URL:
pkg:maven/org.codehaus.plexus:plexus-utils
Total PRs:
149 Dependabot PRs
Latest PR:
15 days ago
Unique Repositories:
106 repositories
Unique Repos (30 days):
3 repositories
Security Advisories
plexus-codehaus vulnerable to directory traversal
GHSA-g6ph-x5wf-g337 CVE-2022-4244 HIGH published almost 3 years ago • updated 29 days ago
A flaw was found in plexus-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outsid...
Plexus-Utils has a Directory Traversal vulnerability in its extractFile method
GHSA-6fmv-xxpf-w3cw CVE-2025-67030 HIGH published 4 months ago • updated 3 days ago
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0...
codehaus-plexus vulnerable to XML injection
GHSA-jcwr-x25h-x5fh CVE-2022-4245 MODERATE published almost 3 years ago • updated 10 days ago
A flaw was found in codehaus-plexus. The `org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment` fails to sanitize comments for a `-->` sequence....
OS Command Injection in Plexus-utils
GHSA-8vhq-qq4p-grq3 CVE-2017-1000487 CRITICAL published about 4 years ago • updated 29 days ago
Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.
Recent PRs (filtered by: Merged )
RSS Feed Clear filter
Bump org.codehaus.plexus:plexus-utils from 2.0.6 to 3.0.24 in /Java

texttechnologylab/GerParCor #9

2.0.6 → 3.0.24 Major PR
Merged 9 months ago
texttechnologylab
Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 4.0.2

mavenplugins/central-publishing-maven-plugin #18

3.5.1 → 4.0.2 Major PR
Merged 11 months ago 1 comment
mavenplugins
Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 3.6.0

eclipse-ee4j/glassfish-build-maven-plugin #285

3.5.1 → 3.6.0 Minor PR
Merged 12 months ago
eclipse-ee4j
Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 3.6.0

apache/maven-fluido-skin #311

3.5.1 → 3.6.0 Minor PR
Merged about 1 year ago
apache
Bump org.codehaus.plexus:plexus-utils from 4.0.0 to 4.0.2

dataliquid/asciidoc-maven-plugin #3

4.0.0 → 4.0.2 Patch PR
Merged about 1 year ago
dataliquid
Bump org.codehaus.plexus:plexus-utils from 3.0.16 to 3.0.24 in /build/maven/xmlcodegen

geotools/geotools #5233

3.0.16 → 3.0.24 Patch PR
Merged about 1 year ago
geotools
build(deps): bump org.codehaus.plexus:plexus-utils from 3.0.16 to 3.0.24 in /maven2-plugins/myfaces-tagdoc-plugin

apache/myfaces-build-tools #57

3.0.16 → 3.0.24 Patch PR
Merged about 1 year ago
apache
Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 4.0.2

apache/pinot #15789

3.5.1 → 4.0.2 Major PR
Merged about 1 year ago
apache
build(deps): bump org.codehaus.plexus:plexus-utils from 3.0.16 to 3.0.24 in /maven2-plugins/myfaces-jsdoc-plugin

apache/myfaces-build-tools #33

3.0.16 → 3.0.24 Patch PR
Merged over 1 year ago
apache
Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2

gitflow-incremental-builder/gitflow-incremental-builder #950

4.0.1 → 4.0.2 Patch PR
Merged almost 2 years ago
gitflow-incremental-builder
Bump org.codehaus.plexus:plexus-utils from 3.0.16 to 3.0.24 in /setup

elexis/elexis-uitest #3

3.0.16 → 3.0.24 Patch PR
Merged almost 3 years ago
elexis
Package Details
Name: org.codehaus.plexus:plexus-utils
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/org.codehaus.plexus:plexus-utils
JSON API: View JSON
Security Advisories

4

Active advisories
CRITICAL 1
HIGH 2
MODERATE 1
View All maven Advisories
Package Information
Description:

A collection of various utility classes to ease working with strings, files, command lines and more.

Repository: https://github.com/codehaus-plexus/plexus-utils
Homepage: https://codehaus-plexus.github.io/plexus-utils/
Latest Release: 4.0.2
almost 2 years ago
Dependent Repos: 13,438
Dependent Packages: 3,187
Ranking: Top 0.0643% by dependent repos Top 0.0216% by dependent pkgs
PR Status
Open 71 (47.7%)
Merged 11 (7.4%)
Closed 57 (38.3%)
PR Types
Major 73 (49.0%)
Minor 22 (14.8%)
Patch 43 (28.9%)