Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

org.codehaus.plexus:plexus-utils

Ecosystem:
maven
Package URL:
pkg:maven/org.codehaus.plexus:plexus-utils
Total PRs:
149 Dependabot PRs
Latest PR:
15 days ago
Unique Repositories:
106 repositories
Unique Repos (30 days):
3 repositories
Security Advisories
plexus-codehaus vulnerable to directory traversal
GHSA-g6ph-x5wf-g337 CVE-2022-4244 HIGH published almost 3 years ago • updated 29 days ago
A flaw was found in plexus-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outsid...
Plexus-Utils has a Directory Traversal vulnerability in its extractFile method
GHSA-6fmv-xxpf-w3cw CVE-2025-67030 HIGH published 4 months ago • updated 3 days ago
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0...
codehaus-plexus vulnerable to XML injection
GHSA-jcwr-x25h-x5fh CVE-2022-4245 MODERATE published almost 3 years ago • updated 10 days ago
A flaw was found in codehaus-plexus. The `org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment` fails to sanitize comments for a `-->` sequence....
OS Command Injection in Plexus-utils
GHSA-8vhq-qq4p-grq3 CVE-2017-1000487 CRITICAL published about 4 years ago • updated 29 days ago
Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
build(deps-dev): bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3

yuchen-osdu/partition #11

4.0.2 → 4.0.3 Patch PR
Open about 1 month ago 3 comments
yuchen-osdu
Bump the maven group across 7 directories with 16 updates

vishakha-mali/dubbo #7

3.6.0 → 3.6.1 Patch PR
Closed 2 months ago 1 comment
vishakha-mali
Bump the maven group across 1 directory with 6 updates

onap/aai-aai-common #42

4.0.2 → 4.0.3 Patch PR
Open 2 months ago 2 comments
onap
Bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3

yegor256/requs #248

4.0.2 → 4.0.3 Patch PR
Open 2 months ago 1 comment
yegor256
Bump the dependencies group across 1 directory with 52 updates

theit/logging-log4j2 #297

3.6.0 → 3.6.1 Patch PR
Open 3 months ago 1 comment
theit
Bump the dependencies group across 1 directory with 50 updates

ppkarwasz/logging-log4j2 #606

3.6.0 → 3.6.1 Patch PR
Closed 3 months ago 5 comments
ppkarwasz
chore(deps)(deps): bump the parent-pom group across 1 directory with 33 updates

CyborgCodeSyndicate/utilities #27

4.0.2 → 4.0.3 Patch PR
Open 3 months ago 1 comment
CyborgCodeSyndicate
Bump the maven group across 7 directories with 16 updates

vishakha-mali/dubbo #2

3.6.0 → 3.6.1 Patch PR
Closed 3 months ago 1 comment
vishakha-mali
chore(deps)(deps): bump the parent-pom group across 1 directory with 32 updates

CyborgCodeSyndicate/utilities #26

4.0.2 → 4.0.3 Patch PR
Open 3 months ago 2 comments
CyborgCodeSyndicate
Bump org.codehaus.plexus:plexus-utils from 3.6.0 to 3.6.1

apache/maven-gpg-plugin #315

3.6.0 → 3.6.1 Patch PR
Open 4 months ago 1 comment
apache
Bump org.codehaus.plexus:plexus-utils from 3.6.0 to 3.6.1

eclipse-ee4j/glassfish-build-maven-plugin #333

3.6.0 → 3.6.1 Patch PR
Open 4 months ago 1 comment
eclipse-ee4j
chore(deps): bump the java-minor-patch group with 8 updates

nordic-institute/x-road-catalog #129

4.0.2 → 4.0.3 Patch PR
Closed 4 months ago 2 comments
nordic-institute
Bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3

Hawthorne001/trino #736

4.0.2 → 4.0.3 Patch PR
Open 4 months ago 2 comments
Hawthorne001
[12.1.x EE9] Bump the dev-dependencies group across 1 directory with 18 updates

jetty/jetty.project #14780

4.0.2 → 4.0.3 Patch PR
Closed 4 months ago 1 comment
jetty
[12.1.x Root pom] Bump the dev-dependencies group across 1 directory with 17 updates

jetty/jetty.project #14769

4.0.2 → 4.0.3 Patch PR
Closed 4 months ago 2 comments
jetty
build(deps): bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3 in /testfoundation in the maven group across 1 directory

Hack23/cia #8498

4.0.2 → 4.0.3 Patch PR
Open 4 months ago 3 comments
Hack23
Bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3

veithen/phos #123

4.0.2 → 4.0.3 Patch PR
Open 4 months ago 1 comment
veithen
chore(deps-dev): bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3 in /flow-plugins/flow-plugin-base

vaadin/flow #24040

4.0.2 → 4.0.3 Patch PR
Open 4 months ago 4 comments
vaadin
Bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3

apache/karaf #2486

4.0.2 → 4.0.3 Patch PR
Open 4 months ago 1 comment
apache
Bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3

mathieucarbou/license-maven-plugin #1040

4.0.2 → 4.0.3 Patch PR
Closed 4 months ago 2 comments
mathieucarbou
[10.0.x] Bump the dev-dependencies group across 1 directory with 82 updates

cstamas/jetty.project #262

4.0.0 → 4.0.2 Patch PR
Open 7 months ago 2 comments
cstamas
Bump the core-dependencies group across 1 directory with 10 updates

danielscholl-osdu/partition #17

4.0.1 → 4.0.2 Patch PR
Open 7 months ago 4 comments
danielscholl-osdu
Bump the core-dependencies group in /partition-core with 16 updates

danielscholl-osdu/partition #10

4.0.1 → 4.0.2 Patch PR
Open 8 months ago 4 comments
danielscholl-osdu
Bump the core-dependencies group in /partition-core with 15 updates

danielscholl-osdu/partition #16

4.0.1 → 4.0.2 Patch PR
Open 9 months ago 10 comments
danielscholl-osdu
Bump the core-dependencies group in /legal-core with 24 updates

danielscholl-osdu/legal #10

4.0.0 → 4.0.2 Patch PR
Open 9 months ago 4 comments
danielscholl-osdu
[10.0.x] Bump the dev-dependencies group across 1 directory with 129 updates

cstamas/jetty.project #248

4.0.0 → 4.0.2 Patch PR
Closed 12 months ago 2 comments
cstamas
Bump org.codehaus.plexus:plexus-utils from 3.0.1 to 3.0.24 in /sandbox/fabric8-maven-plugin

eroad/fabric8 #2

3.0.1 → 3.0.24 Patch PR
Open 12 months ago
eroad
Bump org.codehaus.plexus:plexus-utils from 4.0.0 to 4.0.2

dataliquid/asciidoc-maven-plugin #3

4.0.0 → 4.0.2 Patch PR
Merged about 1 year ago
dataliquid
Bump org.codehaus.plexus:plexus-utils from 3.0.16 to 3.0.24 in /build/maven/xmlcodegen

geotools/geotools #5233

3.0.16 → 3.0.24 Patch PR
Merged about 1 year ago
geotools
[10.0.x] Bump the dev-dependencies group across 1 directory with 129 updates

cstamas/jetty.project #244

4.0.0 → 4.0.2 Patch PR
Open about 1 year ago 2 comments
cstamas
build(deps): bump org.codehaus.plexus:plexus-utils from 3.0.16 to 3.0.24 in /maven2-plugins/myfaces-tagdoc-plugin

apache/myfaces-build-tools #57

3.0.16 → 3.0.24 Patch PR
Merged about 1 year ago
apache
[10.0.x] Bump the dev-dependencies group with 79 updates

cstamas/jetty.project #242

4.0.0 → 4.0.2 Patch PR
Closed about 1 year ago 2 comments
cstamas
Bump org.codehaus.plexus:plexus-utils from 3.0.21 to 3.0.24 in /contrib/rulecheck-maven-plugin

AKJUS/byteman #3

3.0.21 → 3.0.24 Patch PR
Closed over 1 year ago 1 comment
AKJUS
build(deps): bump org.codehaus.plexus:plexus-utils from 3.0.16 to 3.0.24 in /maven2-plugins/myfaces-jsdoc-plugin

apache/myfaces-build-tools #33

3.0.16 → 3.0.24 Patch PR
Merged over 1 year ago
apache
Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2

jvanzyl/provisio-archiver #38

4.0.1 → 4.0.2 Patch PR
Open almost 2 years ago 2 comments
jvanzyl
Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2

gitflow-incremental-builder/gitflow-incremental-builder #950

4.0.1 → 4.0.2 Patch PR
Merged almost 2 years ago
gitflow-incremental-builder
[MRESOLVER-707] Bump org.codehaus.plexus:plexus-utils from 4.0.0 to 4.0.2

apache/maven-resolver #580

4.0.0 → 4.0.2 Patch PR
Closed almost 2 years ago 1 comment
apache
Bump org.codehaus.plexus:plexus-utils from 4.0.0 to 4.0.1

apache/maven-resolver #466

4.0.0 → 4.0.1 Patch PR
Closed over 2 years ago 1 comment
apache
Bump org.codehaus.plexus:plexus-utils from 3.0.8 to 3.0.24 in /websphere-maven-plugin

acidburn0zzz/websphere-maven-plugin #4

3.0.8 → 3.0.24 Patch PR
Closed almost 3 years ago 1 comment
acidburn0zzz
Bump org.codehaus.plexus:plexus-utils from 3.0.16 to 3.0.24

dataliquid/distribution-verifier-maven-plugin #5

3.0.16 → 3.0.24 Patch PR
Open almost 3 years ago 2 comments
dataliquid
Bump org.codehaus.plexus:plexus-utils from 3.0.16 to 3.0.24 in /setup

elexis/elexis-uitest #3

3.0.16 → 3.0.24 Patch PR
Merged almost 3 years ago
elexis
Bump org.codehaus.plexus:plexus-utils from 3.0.15 to 3.0.24 in /src/it/setup-custom-toolchain

Mattlk13/maven-toolchains-plugin #5

3.0.15 → 3.0.24 Patch PR
Closed almost 3 years ago 1 comment
Mattlk13
Bump org.codehaus.plexus:plexus-utils from 3.0.10 to 3.0.24 in /compiler

apigee/trireme #210

3.0.10 → 3.0.24 Patch PR
Closed almost 3 years ago 1 comment
apigee
Package Details
Name: org.codehaus.plexus:plexus-utils
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/org.codehaus.plexus:plexus-utils
JSON API: View JSON
Security Advisories

4

Active advisories
CRITICAL 1
HIGH 2
MODERATE 1
View All maven Advisories
Package Information
Description:

A collection of various utility classes to ease working with strings, files, command lines and more.

Repository: https://github.com/codehaus-plexus/plexus-utils
Homepage: https://codehaus-plexus.github.io/plexus-utils/
Latest Release: 4.0.2
almost 2 years ago
Dependent Repos: 13,438
Dependent Packages: 3,187
Ranking: Top 0.0643% by dependent repos Top 0.0216% by dependent pkgs
PR Status
Open 71 (47.7%)
Merged 11 (7.4%)
Closed 57 (38.3%)
PR Types
Major 73 (49.0%)
Minor 22 (14.8%)
Patch 43 (28.9%)