Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

org.codehaus.plexus:plexus-utils

Ecosystem:
maven
Package URL:
pkg:maven/org.codehaus.plexus:plexus-utils
Total PRs:
149 Dependabot PRs
Latest PR:
15 days ago
Unique Repositories:
106 repositories
Unique Repos (30 days):
3 repositories
Security Advisories
plexus-codehaus vulnerable to directory traversal
GHSA-g6ph-x5wf-g337 CVE-2022-4244 HIGH published almost 3 years ago • updated 29 days ago
A flaw was found in plexus-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outsid...
Plexus-Utils has a Directory Traversal vulnerability in its extractFile method
GHSA-6fmv-xxpf-w3cw CVE-2025-67030 HIGH published 4 months ago • updated 3 days ago
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0...
codehaus-plexus vulnerable to XML injection
GHSA-jcwr-x25h-x5fh CVE-2022-4245 MODERATE published almost 3 years ago • updated 10 days ago
A flaw was found in codehaus-plexus. The `org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment` fails to sanitize comments for a `-->` sequence....
OS Command Injection in Plexus-utils
GHSA-8vhq-qq4p-grq3 CVE-2017-1000487 CRITICAL published about 4 years ago • updated 29 days ago
Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.
Recent PRs (filtered by: Open , Patch PRs )
RSS Feed Clear filter
build(deps-dev): bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3

yuchen-osdu/partition #11

4.0.2 → 4.0.3 Patch PR
Open about 1 month ago 3 comments
yuchen-osdu
Bump the maven group across 1 directory with 6 updates

onap/aai-aai-common #42

4.0.2 → 4.0.3 Patch PR
Open 2 months ago 2 comments
onap
Bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3

yegor256/requs #248

4.0.2 → 4.0.3 Patch PR
Open 2 months ago 1 comment
yegor256
Bump the dependencies group across 1 directory with 52 updates

theit/logging-log4j2 #297

3.6.0 → 3.6.1 Patch PR
Open 3 months ago 1 comment
theit
chore(deps)(deps): bump the parent-pom group across 1 directory with 33 updates

CyborgCodeSyndicate/utilities #27

4.0.2 → 4.0.3 Patch PR
Open 3 months ago 1 comment
CyborgCodeSyndicate
chore(deps)(deps): bump the parent-pom group across 1 directory with 32 updates

CyborgCodeSyndicate/utilities #26

4.0.2 → 4.0.3 Patch PR
Open 3 months ago 2 comments
CyborgCodeSyndicate
Bump org.codehaus.plexus:plexus-utils from 3.6.0 to 3.6.1

apache/maven-gpg-plugin #315

3.6.0 → 3.6.1 Patch PR
Open 4 months ago 1 comment
apache
Bump org.codehaus.plexus:plexus-utils from 3.6.0 to 3.6.1

eclipse-ee4j/glassfish-build-maven-plugin #333

3.6.0 → 3.6.1 Patch PR
Open 4 months ago 1 comment
eclipse-ee4j
Bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3

Hawthorne001/trino #736

4.0.2 → 4.0.3 Patch PR
Open 4 months ago 2 comments
Hawthorne001
build(deps): bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3 in /testfoundation in the maven group across 1 directory

Hack23/cia #8498

4.0.2 → 4.0.3 Patch PR
Open 4 months ago 3 comments
Hack23
Bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3

veithen/phos #123

4.0.2 → 4.0.3 Patch PR
Open 4 months ago 1 comment
veithen
chore(deps-dev): bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3 in /flow-plugins/flow-plugin-base

vaadin/flow #24040

4.0.2 → 4.0.3 Patch PR
Open 4 months ago 4 comments
vaadin
Bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3

apache/karaf #2486

4.0.2 → 4.0.3 Patch PR
Open 4 months ago 1 comment
apache
[10.0.x] Bump the dev-dependencies group across 1 directory with 82 updates

cstamas/jetty.project #262

4.0.0 → 4.0.2 Patch PR
Open 7 months ago 2 comments
cstamas
Bump the core-dependencies group across 1 directory with 10 updates

danielscholl-osdu/partition #17

4.0.1 → 4.0.2 Patch PR
Open 7 months ago 4 comments
danielscholl-osdu
Bump the core-dependencies group in /partition-core with 16 updates

danielscholl-osdu/partition #10

4.0.1 → 4.0.2 Patch PR
Open 8 months ago 4 comments
danielscholl-osdu
Bump the core-dependencies group in /partition-core with 15 updates

danielscholl-osdu/partition #16

4.0.1 → 4.0.2 Patch PR
Open 9 months ago 10 comments
danielscholl-osdu
Bump the core-dependencies group in /legal-core with 24 updates

danielscholl-osdu/legal #10

4.0.0 → 4.0.2 Patch PR
Open 9 months ago 4 comments
danielscholl-osdu
Bump org.codehaus.plexus:plexus-utils from 3.0.1 to 3.0.24 in /sandbox/fabric8-maven-plugin

eroad/fabric8 #2

3.0.1 → 3.0.24 Patch PR
Open 12 months ago
eroad
[10.0.x] Bump the dev-dependencies group across 1 directory with 129 updates

cstamas/jetty.project #244

4.0.0 → 4.0.2 Patch PR
Open about 1 year ago 2 comments
cstamas
Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2

jvanzyl/provisio-archiver #38

4.0.1 → 4.0.2 Patch PR
Open almost 2 years ago 2 comments
jvanzyl
Bump org.codehaus.plexus:plexus-utils from 3.0.16 to 3.0.24

dataliquid/distribution-verifier-maven-plugin #5

3.0.16 → 3.0.24 Patch PR
Open almost 3 years ago 2 comments
dataliquid
Package Details
Name: org.codehaus.plexus:plexus-utils
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/org.codehaus.plexus:plexus-utils
JSON API: View JSON
Security Advisories

4

Active advisories
CRITICAL 1
HIGH 2
MODERATE 1
View All maven Advisories
Package Information
Description:

A collection of various utility classes to ease working with strings, files, command lines and more.

Repository: https://github.com/codehaus-plexus/plexus-utils
Homepage: https://codehaus-plexus.github.io/plexus-utils/
Latest Release: 4.0.2
almost 2 years ago
Dependent Repos: 13,438
Dependent Packages: 3,187
Ranking: Top 0.0643% by dependent repos Top 0.0216% by dependent pkgs
PR Status
Open 71 (47.7%)
Merged 11 (7.4%)
Closed 57 (38.3%)
PR Types
Major 73 (49.0%)
Minor 22 (14.8%)
Patch 43 (28.9%)