org.codehaus.plexus:plexus-utils
Ecosystem:
maven
maven
Package URL:
pkg:maven/org.codehaus.plexus:plexus-utils
Total PRs:
149 Dependabot PRs
149 Dependabot PRs
Latest PR:
15 days ago
15 days ago
Unique Repositories:
106 repositories
106 repositories
Unique Repos (30 days):
3 repositories
3 repositories
Security Advisories
plexus-codehaus vulnerable to directory traversal
GHSA-g6ph-x5wf-g337
CVE-2022-4244
HIGH
published almost 3 years ago
• updated 29 days ago
A flaw was found in plexus-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outsid...
Plexus-Utils has a Directory Traversal vulnerability in its extractFile method
GHSA-6fmv-xxpf-w3cw
CVE-2025-67030
HIGH
published 4 months ago
• updated 3 days ago
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0...
codehaus-plexus vulnerable to XML injection
GHSA-jcwr-x25h-x5fh
CVE-2022-4245
MODERATE
published almost 3 years ago
• updated 10 days ago
A flaw was found in codehaus-plexus. The `org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment` fails to sanitize comments for a `-->` sequence....
OS Command Injection in Plexus-utils
GHSA-8vhq-qq4p-grq3
CVE-2017-1000487
CRITICAL
published about 4 years ago
• updated 29 days ago
Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.
Recent PRs (filtered by: Merged , Patch PRs )
Bump org.codehaus.plexus:plexus-utils from 4.0.0 to 4.0.2
dataliquid/asciidoc-maven-plugin #3
4.0.0 → 4.0.2
Patch PR
Merged
about 1 year ago
Bump org.codehaus.plexus:plexus-utils from 3.0.16 to 3.0.24 in /build/maven/xmlcodegen
geotools/geotools #5233
3.0.16 → 3.0.24
Patch PR
Merged
about 1 year ago
build(deps): bump org.codehaus.plexus:plexus-utils from 3.0.16 to 3.0.24 in /maven2-plugins/myfaces-tagdoc-plugin
apache/myfaces-build-tools #57
3.0.16 → 3.0.24
Patch PR
Merged
about 1 year ago
build(deps): bump org.codehaus.plexus:plexus-utils from 3.0.16 to 3.0.24 in /maven2-plugins/myfaces-jsdoc-plugin
apache/myfaces-build-tools #33
3.0.16 → 3.0.24
Patch PR
Merged
over 1 year ago
Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2
gitflow-incremental-builder/gitflow-incremental-builder #950
4.0.1 → 4.0.2
Patch PR
Merged
almost 2 years ago
Bump org.codehaus.plexus:plexus-utils from 3.0.16 to 3.0.24 in /setup
3.0.16 → 3.0.24
Patch PR
Merged
almost 3 years ago
Package Details
| Name: | org.codehaus.plexus:plexus-utils |
| Ecosystem: | maven |
| PURL Type: | maven |
| Package URL: | pkg:maven/org.codehaus.plexus:plexus-utils |
| JSON API: | View JSON |
Security Advisories
Package Information
Description:
A collection of various utility classes to ease working with strings, files, command lines and more.
| Repository: | https://github.com/codehaus-plexus/plexus-utils |
| Homepage: | https://codehaus-plexus.github.io/plexus-utils/ |
| Latest Release: |
4.0.2
almost 2 years ago |
| Dependent Repos: | 13,438 |
| Dependent Packages: | 3,187 |
| Ranking: | Top 0.0643% by dependent repos Top 0.0216% by dependent pkgs |