Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade osgi-coreUpgrade glassfish-el-javadocUpgrade maven-surefire-javadocUpgrade plexus-resourcesUpgrade sisu-plexusUpgrade ant-contribUpgrade osgi-compendium-javadocUpgrade felix-osgi-compendiumUpgrade guice-servletUpgrade ant-apache-regexpUpgrade maven-filteringUpgrade python3-javapackagesUpgrade maven-doxia-module-docbook-simpleUpgrade plexus-component-api-javadocUpgrade maven-hawtjni-pluginUpgrade maven-plugin-toolsUpgrade junit-manualUpgrade maven-shared-incrementalUpgrade jboss-interceptors-1.2-api-javadocUpgrade plexus-ant-factory-javadocUpgrade powermock-api-easymockUpgrade apache-commons-loggingUpgrade guava20-javadocUpgrade bsh-manualUpgrade httpcomponents-client-cacheUpgrade guice-throwingprovidersUpgrade bsf-javadocUpgrade atinjectUpgrade javapackages-filesystemUpgrade javamail-javadocUpgrade ant-manualUpgrade munge-maven-pluginUpgrade jdependUpgrade xml-commons-resolverUpgrade glassfish-servlet-api-javadocUpgrade testng-javadocUpgrade javapackages-localUpgrade maven-unboundUpgrade osgi-core-javadocUpgrade felix-utils-javadocUpgrade assertj-core-javadocUpgrade antlr-javadocUpgrade plexus-interactivity-jlineUpgrade jdepend-javadocUpgrade maven-doxia-test-docsUpgrade apache-commons-jxpathUpgrade plexus-archiver-javadocUpgrade maven-doxia-sitetoolsUpgrade xmvn-substUpgrade objenesis-javadocUpgrade maven-monitorUpgrade maven-resolver-spiUpgrade maven-jar-plugin-javadocUpgrade hamcrest-demoUpgrade hamcrest-javadocUpgrade maven-failsafe-pluginUpgrade jsch-javadocUpgrade testngUpgrade glassfish-el-apiUpgrade maven-archiverUpgrade xalan-j2-demoUpgrade apache-commons-execUpgrade maven-install-pluginUpgrade jschUpgrade powermock-api-mockitoUpgrade maven-doxia-logging-apiUpgrade jdomUpgrade maven-wagon-http-sharedUpgrade byaccjUpgrade ant-apache-bcelUpgrade hamcrest-coreUpgrade google-guice-javadocUpgrade maven-resolver-javadocUpgrade maven-dependency-tree-javadocUpgrade maven-script-interpreterUpgrade ant-commons-loggingUpgrade qdox-javadocUpgrade ant-junitUpgrade velocityUpgrade objectweb-asmUpgrade maven-surefire-pluginUpgrade jtidyUpgrade xmvn-bisectUpgrade fusesource-pomUpgrade apache-commons-codec-javadocUpgrade jsoupUpgrade apache-commons-lang-javadocUpgrade java_cup-manualUpgrade sisu-javadocUpgrade plexus-containers-component-metadataUpgrade ant-antlrUpgrade jakarta-commons-httpclient-manualUpgrade glassfish-annotation-apiUpgrade maven-plugin-tools-javadocsUpgrade maven-resources-pluginUpgrade spice-parentUpgrade powermock-coreUpgrade maven-invoker-plugin-javadocUpgrade maven-profileUpgrade xbean-javadocUpgrade plexus-containers-component-javadocUpgrade apache-commons-beanutils-javadocUpgrade maven-doxia-module-twikiUpgrade apache-commons-logging-javadocUpgrade maven-enforcerUpgrade maven-source-pluginUpgrade plexus-bsh-factoryUpgrade httpcomponents-client-javadocUpgrade maven-plugin-tools-javaUpgrade hamcrestUpgrade maven-shared-ioUpgrade maven-plugin-annotationsUpgrade guice-bomUpgrade log4j12Upgrade bcelUpgrade maven-source-plugin-javadocUpgrade apache-commons-beanutilsUpgrade plexus-containers-javadocUpgrade apache-commons-io-javadocUpgrade powermock-testngUpgrade maven-plugin-descriptorUpgrade apache-commons-lang3-javadocUpgrade bsfUpgrade maven-doxia-module-aptUpgrade slf4j-jclUpgrade jansi-nativeUpgrade maven-plugin-tools-beanshellUpgrade maven-resolver-utilUpgrade plexus-cli-javadocUpgrade maven-plugin-tools-antUpgrade aqute-bndUpgrade maven-doxia-module-rtfUpgrade apache-ivy-javadocUpgrade maven-doxia-module-xdocUpgrade maven-compiler-pluginUpgrade maven-reporting-api-javadocUpgrade aopallianceUpgrade maven-invoker-javadocUpgrade maven-shared-utilsUpgrade aopalliance-javadocUpgrade maven-dependency-treeUpgrade jsr-305-javadocUpgrade plexus-component-apiUpgrade ant-testutilUpgrade apache-commons-parentUpgrade guice-multibindingsUpgrade maven-dependency-plugin-javadocUpgrade java_cupUpgrade ant-jschUpgrade junit-javadocUpgrade jzlibUpgrade slf4j-sourcesUpgrade xmvn-minimalUpgrade plexus-interactivity-javadocUpgrade ant-javadocUpgrade maven-wagon-providersUpgrade cglib-javadocUpgrade guice-assistedinjectUpgrade easymockUpgrade maven-wagon-ftpUpgrade plexus-classworldsUpgrade plexus-classworlds-javadocUpgrade slf4j-jdk14Upgrade jansi-javadocUpgrade jlineUpgrade sisu-mojosUpgrade maven-test-toolsUpgrade maven-settingsUpgrade apache-parentUpgrade os-maven-plugin-javadocUpgrade maven-shared-incremental-javadocUpgrade maven-compiler-plugin-javadocUpgrade powermock-javadocUpgrade ant-apache-log4jUpgrade jaxen-demoUpgrade exec-maven-pluginUpgrade forge-parentUpgrade maven-artifact-managerUpgrade ant-swingUpgrade jzlib-demoUpgrade google-guiceUpgrade guava20Upgrade plexus-containersUpgrade felix-osgi-foundation-javadocUpgrade maven-reporting-apiUpgrade plexus-archiverUpgrade apache-commons-exec-javadocUpgrade mockitoUpgrade java_cup-javadocUpgrade geronimo-parent-pomsUpgrade powermock-reflectUpgrade plexus-build-api-javadocUpgrade felix-osgi-core-javadocUpgrade mojo-parentUpgrade plexus-interpolationUpgrade maven-doxia-coreUpgrade guice-grapherUpgrade plexus-containers-container-defaultUpgrade maven-resolver-apiUpgrade maven-shade-pluginUpgrade ant-apache-xalan2Upgrade maven2-javadocUpgrade maven-toolchainUpgrade jakarta-commons-httpclient-javadocUpgrade maven-plugin-tools-apiUpgrade xz-javaUpgrade maven-doxia-sitetools-javadocUpgrade weld-parentUpgrade maven-resolver-implUpgrade plexus-io-javadocUpgrade xerces-j2-javadocUpgrade ivy-localUpgrade maven-invokerUpgrade maven-plugin-tools-modelUpgrade maven-dependency-analyzer-javadocUpgrade maven-wagon-httpUpgrade guavaUpgrade jansiUpgrade jvnet-parentUpgrade maven-projectUpgrade xmvn-connector-aetherUpgrade guava20-testlibUpgrade ant-commons-netUpgrade geronimo-annotation-javadocUpgrade guice-extensionsUpgrade plexus-i18n-javadocUpgrade felix-utilsUpgrade antlr-manualUpgrade maven-resolverUpgrade plexus-bsh-factory-javadocUpgrade plexus-interpolation-javadocUpgrade apache-commons-cliUpgrade geronimo-jpa-javadocUpgrade maven-doxiaUpgrade maven-plugin-build-helperUpgrade slf4j-log4j12Upgrade glassfish-servlet-apiUpgrade maven-resolver-transport-httpUpgrade guice-jndiUpgrade atinject-javadocUpgrade cglibUpgrade felix-parentUpgrade ant-jmfUpgrade log4j-over-slf4jUpgrade felix-osgi-foundationUpgrade guice-jmxUpgrade apache-commons-collections-javadocUpgrade jdom2Upgrade beust-jcommander-javadocUpgrade maven-enforcer-pluginUpgrade maven-plugin-testingUpgrade jdom2-javadocUpgrade ant-libUpgrade maven-file-management-javadocUpgrade maven-openjdk8Upgrade osgi-annotationUpgrade javassistUpgrade httpcomponents-clientUpgrade hawtjniUpgrade javacc-demoUpgrade maven-plugin-testing-harnessUpgrade regexpUpgrade apache-commons-collectionsUpgrade glassfish-annotation-api-javadocUpgrade spec-version-maven-pluginUpgrade maven-resources-plugin-javadocUpgrade plexus-cliUpgrade jakarta-commons-httpclientUpgrade apache-commons-jxpath-javadocUpgrade maven-javadocUpgrade munge-maven-plugin-javadocUpgrade hawtjni-javadocUpgrade jdepend-demoUpgrade maven-enforcer-javadocUpgrade qdoxUpgrade maven-antrun-plugin-javadocUpgrade velocity-manualUpgrade plexus-compilerUpgrade beust-jcommanderUpgrade jline-javadocUpgrade mavenUpgrade plexus-languages-javadocUpgrade maven-wagon-http-lightweightUpgrade plexus-utils-javadocUpgrade glassfish-master-pomUpgrade xml-commons-apis-javadocUpgrade httpcomponents-coreUpgrade jaxenUpgrade maven-remote-resources-plugin-javadocUpgrade xml-commons-apis-manualUpgrade xalan-j2-manualUpgrade jsr-305Upgrade javamailUpgrade sonatype-plugins-parentUpgrade xalan-j2-xsltcUpgrade maven-plugin-registryUpgrade maven-surefire-report-pluginUpgrade apache-resource-bundlesUpgrade plexus-component-factories-pomUpgrade plexus-velocityUpgrade apache-ivyUpgrade objectweb-asm-javadocUpgrade maven-script-beanshellUpgrade maven-artifact-resolverUpgrade glassfish-jsp-api-javadocUpgrade javacc-maven-plugin-javadocUpgrade xmlunitUpgrade powermock-junit4Upgrade jzlib-javadocUpgrade objectweb-pomUpgrade jdom-javadocUpgrade jdependency-javadocUpgrade maven-clean-plugin-javadocUpgrade maven-plugin-testing-toolsUpgrade plexus-sec-dispatcherUpgrade ant-apache-oroUpgrade bnd-maven-pluginUpgrade antlr-C++Upgrade xmvn-coreUpgrade cdi-apiUpgrade maven-plugin-tools-annotationsUpgrade plexus-sec-dispatcher-javadocUpgrade slf4j-manualUpgrade xmvnUpgrade spec-version-maven-plugin-javadocUpgrade maven-resolver-transport-fileUpgrade slf4j-extUpgrade powermock-commonUpgrade plexus-components-pomUpgrade osgi-compendiumUpgrade maven-resolver-test-utilUpgrade maven-doxia-module-fmlUpgrade exec-maven-plugin-javadocUpgrade jboss-parentUpgrade maven-jar-pluginUpgrade plexus-utilsUpgrade maven-doxia-sink-apiUpgrade ant-contrib-javadocUpgrade plexus-containers-component-annotationsUpgrade slf4jUpgrade jcl-over-slf4jUpgrade maven-openjdk25Upgrade maven-resolver-transport-classpathUpgrade bshUpgrade guice-testlibUpgrade maven-verifier-javadocUpgrade powermock-api-supportUpgrade plexus-ioUpgrade plexus-cipherUpgrade javacc-javadocUpgrade maven-doxia-module-confluenceUpgrade maven-enforcer-apiUpgrade jakarta-annotationsUpgrade ant-javamailUpgrade assertj-coreUpgrade maven-scriptUpgrade glassfish-jsp-apiUpgrade maven-sharedUpgrade jansi-native-javadocUpgrade maven-modelUpgrade modelloUpgrade hawtjni-runtimeUpgrade apache-commons-cli-javadocUpgrade javapackages-toolsUpgrade maven-reporting-impl-javadocUpgrade xmvn-apiUpgrade maven-script-antUpgrade antUpgrade maven-plugin-build-helper-javadocUpgrade plexus-compiler-javadocUpgrade plexus-compiler-extrasUpgrade felix-osgi-compendium-javadocUpgrade xmvn-resolveUpgrade maven-dependency-pluginUpgrade maven-artifact-transfer-javadocUpgrade isorelax-javadocUpgrade geronimo-jms-javadocUpgrade maven-doxia-module-xhtmlUpgrade jflex-javadocUpgrade maven-doxia-modulesUpgrade maven-clean-pluginUpgrade cal10nUpgrade maven-shared-io-javadocUpgrade junitUpgrade xalan-j2-javadocUpgrade maven-resolver-connector-basicUpgrade ant-apache-bsfUpgrade geronimo-jpaUpgrade plexus-cipher-javadocUpgrade osgi-annotation-javadocUpgrade javaccUpgrade apache-commons-compress-javadocUpgrade maven-doxia-javadocUpgrade xmvn-javadocUpgrade cdi-api-javadocUpgrade maven-artifact-resolver-javadocUpgrade xmvn-mojoUpgrade mockito-javadocUpgrade maven-file-managementUpgrade maven-assembly-pluginUpgrade jaxen-javadocUpgrade plexus-resources-javadocUpgrade maven-wagon-javadocUpgrade xalan-j2Upgrade maven-artifact-transferUpgrade plexus-compiler-pomUpgrade javacc-manualUpgrade maven-verifierUpgrade maven-surefire-report-parserUpgrade maven-doxia-testsUpgrade maven-common-artifact-filtersUpgrade glassfish-legalUpgrade plexus-pomUpgrade maven-assembly-plugin-javadocUpgrade maven-common-artifact-filters-javadocUpgrade xbeanUpgrade guice-parentUpgrade apache-commons-ioUpgrade velocity-demoUpgrade easymock-javadocUpgrade slf4j-javadocUpgrade apache-commons-compressUpgrade log4j12-javadocUpgrade maven-reporting-implUpgrade xerces-j2Upgrade xmvn-tools-pomUpgrade maven-shared-utils-javadocUpgrade xmlunit-javadocUpgrade sisu-mojos-javadocUpgrade maven-wagonUpgrade maven-openjdk17Upgrade antlr-toolUpgrade ant-xzUpgrade xml-commons-apisUpgrade xmvn-parent-pomUpgrade maven-install-plugin-javadocUpgrade glassfish-elUpgrade xz-java-javadocUpgrade cal10n-javadocUpgrade xml-commons-resolver-javadocUpgrade maven-surefire-provider-testngUpgrade apache-commons-codecUpgrade apache-commons-netUpgrade maven-invoker-pluginUpgrade os-maven-pluginUpgrade atinject-tckUpgrade maven-surefireUpgrade isorelaxUpgrade jakarta-commons-httpclient-demoUpgrade httpcomponents-projectUpgrade jul-to-slf4jUpgrade maven-shade-plugin-javadocUpgrade plexus-interactivityUpgrade plexus-languagesUpgrade maven-localUpgrade plexus-i18nUpgrade maven-remote-resources-pluginUpgrade maven-plugin-testing-javadocUpgrade httpcomponents-core-javadocUpgrade maven-openjdk21Upgrade maven-enforcer-rulesUpgrade jsoup-javadocUpgrade maven-openjdk11Upgrade felix-osgi-coreUpgrade maven-artifactUpgrade maven-wagon-fileUpgrade aqute-bndlibUpgrade plexus-ant-factoryUpgrade maven-plugin-bundle-javadocUpgrade maven-dependency-analyzerUpgrade maven-cal10n-pluginUpgrade maven-plugin-tools-javadocUpgrade maven-libUpgrade javassist-javadocUpgrade geronimo-annotationUpgrade bsh-javadocUpgrade plexus-interactivity-apiUpgrade xerces-j2-demoUpgrade jdom-demoUpgrade maven-plugin-bundleUpgrade maven-filtering-javadocUpgrade maven-surefire-provider-junitUpgrade jboss-interceptors-1.2-apiUpgrade xmvn-connector-ivyUpgrade apache-commons-collections-testframeworkUpgrade aqute-bnd-javadocUpgrade apache-commons-lang3Upgrade jdependencyUpgrade objenesisUpgrade maven-resolver-transport-wagonUpgrade xmvn-installUpgrade maven-parentUpgrade plexus-build-apiUpgrade maven-doxia-module-latexUpgrade sisuUpgrade jflexUpgrade geronimo-jmsUpgrade maven-archiver-javadocUpgrade maven-wagon-provider-apiUpgrade maven-plugin-pluginUpgrade maven-script-interpreter-javadocUpgrade javacc-maven-pluginUpgrade jtidy-javadocUpgrade apache-commons-langUpgrade ant-jdependUpgrade sonatype-oss-parentUpgrade apache-commons-net-javadocUpgrade velocity-javadocUpgrade bcel-javadocUpgrade plexus-velocity-javadocUpgrade modello-javadocUpgrade ant-apache-resolverUpgrade maven-plugin-tools-generatorsUpgrade maven-plugins-pomUpgrade sisu-injectUpgrade maven-antrun-pluginUpgrade jakarta-oroUpgrade jakarta-oro-javadocUpgrade regexp-javadoc | Jul 14, 2026 | Jul 13, 2026 |
| Amazon Linux Ami 2 | — | Upgrade plexus-utils-javadocUpgrade plexus-utils | May 20, 2026 | May 20, 2026 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Jun 25, 2026 | Mar 25, 2026 |
| Redhat_linux | — | Upgrade jakarta-oroUpgrade geronimo-annotationUpgrade junit-manualUpgrade maven-shade-plugin-javadocUpgrade plexus-cipher-javadocUpgrade plexus-resources-javadocUpgrade maven-script-beanshellUpgrade python3-javapackagesUpgrade maven-dependency-analyzerUpgrade maven-doxia-module-docbook-simpleUpgrade slf4jUpgrade apache-commons-codecUpgrade slf4j-extUpgrade xmvn-minimalUpgrade maven-source-plugin-javadocUpgrade hamcrest-javadocUpgrade ant-jdependUpgrade apache-commons-jxpathUpgrade isorelax-javadocUpgrade maven-surefire-report-pluginUpgrade cglib-javadocUpgrade apache-commons-logging-javadocUpgrade apache-commons-netUpgrade byaccj-debuginfoUpgrade xmvnUpgrade antUpgrade maven-plugin-descriptorUpgrade javaccUpgrade jansi-native-javadocUpgrade jzlib-javadocUpgrade guice-bomUpgrade maven-doxia-module-twikiUpgrade maven-source-pluginUpgrade javacc-manualUpgrade maven-file-management-javadocUpgrade maven2-javadocUpgrade maven-sharedUpgrade maven-localUpgrade guice-multibindingsUpgrade maven-shared-ioUpgrade maven-plugin-tools-javadocsUpgrade maven-surefire-report-parserUpgrade glassfish-jsp-apiUpgrade powermock-api-easymockUpgrade xmvn-resolveUpgrade regexp-javadocUpgrade xmvn-javadocUpgrade maven-monitorUpgrade spec-version-maven-plugin-javadocUpgrade maven-common-artifact-filtersUpgrade maven-resolver-test-utilUpgrade maven-shade-pluginUpgrade maven-plugin-registryUpgrade maven-resolver-javadocUpgrade maven-parentUpgrade maven-settingsUpgrade maven-dependency-pluginUpgrade xalan-j2Upgrade ant-apache-log4jUpgrade qdoxUpgrade xmlunitUpgrade modelloUpgrade jakarta-commons-httpclient-javadocUpgrade maven-modelUpgrade plexus-utils-javadocUpgrade maven-enforcer-rulesUpgrade maven-artifactUpgrade ant-apache-bcelUpgrade jzlibUpgrade felix-osgi-core-javadocUpgrade jdependency-javadocUpgrade maven-remote-resources-plugin-javadocUpgrade maven-resolver-transport-wagonUpgrade apache-commons-beanutils-javadocUpgrade guava20-testlibUpgrade glassfish-el-javadocUpgrade maven-plugin-tools-beanshellUpgrade maven-openjdk17Upgrade jakarta-annotationsUpgrade osgi-coreUpgrade felix-osgi-foundation-javadocUpgrade javacc-javadocUpgrade plexus-cipherUpgrade bshUpgrade objectweb-asmUpgrade maven-toolchainUpgrade geronimo-jpaUpgrade xmvn-substUpgrade xmvn-parent-pomUpgrade jflexUpgrade maven-libUpgrade plexus-compilerUpgrade guice-throwingprovidersUpgrade maven-script-antUpgrade plexus-languages-javadocUpgrade plexus-i18nUpgrade atinjectUpgrade maven-doxia-module-xdocUpgrade google-guice-javadocUpgrade apache-parentUpgrade jdepend-javadocUpgrade javamail-javadocUpgrade objenesis-javadocUpgrade maven-doxia-module-fmlUpgrade maven-plugin-testing-harnessUpgrade maven-surefire-provider-testngUpgrade plexus-cliUpgrade forge-parentUpgrade maven-compiler-plugin-javadocUpgrade powermock-coreUpgrade guice-assistedinjectUpgrade xmvn-installUpgrade maven-verifierUpgrade maven-doxia-modulesUpgrade plexus-compiler-pomUpgrade plexus-utilsUpgrade javacc-demoUpgrade geronimo-jpa-javadocUpgrade aqute-bndUpgrade jdependencyUpgrade maven-surefire-pluginUpgrade mockitoUpgrade slf4j-sourcesUpgrade maven-resolver-connector-basicUpgrade maven-artifact-managerUpgrade maven-assembly-pluginUpgrade geronimo-jmsUpgrade maven-dependency-analyzer-javadocUpgrade apache-commons-compressUpgrade maven-invoker-pluginUpgrade maven-shared-incrementalUpgrade maven-reporting-implUpgrade atinject-tckUpgrade bcelUpgrade apache-commons-collections-testframeworkUpgrade cglibUpgrade ant-apache-regexpUpgrade ant-commons-loggingUpgrade ant-testutilUpgrade xerces-j2-javadocUpgrade cdi-apiUpgrade aopalliance-javadocUpgrade httpcomponents-client-cacheUpgrade maven-artifact-transferUpgrade maven-shared-utils-javadocUpgrade maven-hawtjni-pluginUpgrade xmvn-connector-aetherUpgrade powermock-junit4Upgrade plexus-interpolationUpgrade plexus-ioUpgrade plexus-component-api-javadocUpgrade plexus-sec-dispatcher-javadocUpgrade maven-wagon-http-lightweightUpgrade maven-wagon-providersUpgrade os-maven-plugin-javadocUpgrade sonatype-plugins-parentUpgrade maven-dependency-plugin-javadocUpgrade maven-plugin-bundle-javadocUpgrade maven-common-artifact-filters-javadocUpgrade maven-resolver-spiUpgrade maven-resolver-transport-classpathUpgrade velocity-javadocUpgrade ant-javadocUpgrade maven-enforcerUpgrade jakarta-oro-javadocUpgrade javassistUpgrade httpcomponents-core-javadocUpgrade javassist-javadocUpgrade felix-utilsUpgrade apache-ivy-javadocUpgrade geronimo-jms-javadocUpgrade jboss-interceptors-1.2-apiUpgrade osgi-annotation-javadocUpgrade apache-commons-collectionsUpgrade sisu-mojos-javadocUpgrade maven-doxia-module-rtfUpgrade maven-plugin-tools-javadocUpgrade plexus-classworlds-javadocUpgrade plexus-compiler-extrasUpgrade jdom-demoUpgrade maven-archiverUpgrade ant-apache-oroUpgrade plexus-cli-javadocUpgrade jdependUpgrade jansi-debuginfoUpgrade maven-verifier-javadocUpgrade maven-shared-incremental-javadocUpgrade maven-doxia-javadocUpgrade xml-commons-apis-manualUpgrade maven-antrun-plugin-javadocUpgrade mockito-javadocUpgrade apache-commons-net-javadocUpgrade maven-filtering-javadocUpgrade easymock-javadocUpgrade maven-plugin-annotationsUpgrade jline-javadocUpgrade guice-parentUpgrade xz-javaUpgrade xalan-j2-demoUpgrade powermock-testngUpgrade jaxenUpgrade xalan-j2-xsltcUpgrade velocity-demoUpgrade jansi-nativeUpgrade maven-reporting-impl-javadocUpgrade plexus-build-apiUpgrade maven-profileUpgrade plexus-interactivity-apiUpgrade jdom2Upgrade maven-jar-plugin-javadocUpgrade plexus-velocity-javadocUpgrade maven-script-interpreterUpgrade ivy-localUpgrade javamailUpgrade httpcomponents-coreUpgrade javacc-maven-plugin-javadocUpgrade plexus-containers-javadocUpgrade felix-osgi-compendium-javadocUpgrade hamcrestUpgrade maven-artifact-transfer-javadocUpgrade jlineUpgrade maven-clean-pluginUpgrade maven-doxia-sink-apiUpgrade maven-doxia-module-confluenceUpgrade javapackages-toolsUpgrade modello-javadocUpgrade maven-archiver-javadocUpgrade plexus-containers-component-annotationsUpgrade aopallianceUpgrade maven-doxia-test-docsUpgrade maven-file-managementUpgrade maven-install-plugin-javadocUpgrade jsr-305Upgrade google-guiceUpgrade jakarta-commons-httpclientUpgrade isorelaxUpgrade apache-commons-cliUpgrade assertj-coreUpgrade antlr-javadocUpgrade beust-jcommanderUpgrade maven-resolver-transport-httpUpgrade maven-resources-plugin-javadocUpgrade apache-commons-cli-javadocUpgrade felix-parentUpgrade sisu-injectUpgrade maven-projectUpgrade maven-filteringUpgrade aqute-bndlibUpgrade jansi-javadocUpgrade jansiUpgrade maven-invoker-javadocUpgrade jsoupUpgrade hamcrest-coreUpgrade maven-compiler-pluginUpgrade glassfish-elUpgrade maven-plugin-build-helper-javadocUpgrade maven-wagon-provider-apiUpgrade bnd-maven-pluginUpgrade maven-enforcer-apiUpgrade felix-osgi-compendiumUpgrade plexus-languagesUpgrade xmvn-coreUpgrade log4j12Upgrade xbeanUpgrade glassfish-servlet-apiUpgrade testng-javadocUpgrade powermock-javadocUpgrade slf4j-manualUpgrade slf4j-log4j12Upgrade powermock-api-mockitoUpgrade plexus-pomUpgrade plexus-interpolation-javadocUpgrade java_cupUpgrade maven-surefire-javadocUpgrade maven-resources-pluginUpgrade maven-plugin-tools-modelUpgrade maven-doxiaUpgrade mavenUpgrade log4j-over-slf4jUpgrade jboss-interceptors-1.2-api-javadocUpgrade jdepend-demoUpgrade glassfish-legalUpgrade byaccjUpgrade ant-libUpgrade ant-jschUpgrade maven-antrun-pluginUpgrade xalan-j2-manualUpgrade maven-resolver-implUpgrade plexus-component-factories-pomUpgrade jschUpgrade ant-swingUpgrade httpcomponents-client-javadocUpgrade ant-antlrUpgrade plexus-archiver-javadocUpgrade maven-doxia-module-latexUpgrade glassfish-servlet-api-javadocUpgrade maven-openjdk11Upgrade beust-jcommander-javadocUpgrade maven-resolver-transport-fileNo solution existsUpgrade log4j12-javadocUpgrade osgi-annotationUpgrade ant-apache-resolverUpgrade jtidyUpgrade osgi-compendiumUpgrade plexus-compiler-javadocUpgrade plexus-interactivity-javadocUpgrade plexus-bsh-factoryUpgrade glassfish-master-pomUpgrade plexus-component-apiUpgrade apache-commons-compress-javadocUpgrade apache-commons-lang-javadocUpgrade regexpUpgrade javacc-maven-pluginUpgrade ant-manualUpgrade maven-invokerUpgrade xml-commons-apis-javadocUpgrade bsf-javadocUpgrade hawtjniUpgrade qdox-javadocUpgrade byaccj-debugsourceUpgrade maven-doxia-module-xhtmlUpgrade maven-dependency-treeUpgrade maven-wagon-ftpUpgrade guice-testlibUpgrade xml-commons-resolverUpgrade plexus-containers-component-javadocUpgrade jakarta-commons-httpclient-demoUpgrade maven-plugin-testingUpgrade maven-plugin-tools-apiUpgrade maven-plugin-testing-toolsUpgrade exec-maven-pluginUpgrade apache-commons-collections-javadocUpgrade ant-xzUpgrade apache-commons-beanutilsUpgrade guice-jmxUpgrade bsh-javadocUpgrade objectweb-pomUpgrade xmvn-connector-ivyUpgrade powermock-api-supportUpgrade xmlunit-javadocUpgrade xbean-javadocUpgrade plexus-sec-dispatcherUpgrade plexus-i18n-javadocUpgrade spec-version-maven-pluginUpgrade plexus-containersUpgrade objectweb-asm-javadocUpgrade maven-plugins-pomUpgrade maven-reporting-apiUpgrade maven-enforcer-pluginUpgrade jaxen-javadocUpgrade maven-doxia-sitetoolsUpgrade maven-artifact-resolver-javadocUpgrade httpcomponents-projectUpgrade maven-enforcer-javadocUpgrade hawtjni-javadocUpgrade guice-jndiUpgrade felix-osgi-foundationUpgrade maven-test-toolsUpgrade maven-openjdk21Upgrade java_cup-manualUpgrade jsoup-javadocUpgrade apache-commons-lang3Upgrade plexus-ant-factory-javadocUpgrade maven-dependency-tree-javadocUpgrade glassfish-jsp-api-javadocUpgrade felix-utils-javadocUpgrade guava20Upgrade felix-osgi-coreUpgrade apache-ivyUpgrade ant-contrib-javadocUpgrade ant-javamailUpgrade maven-doxia-coreUpgrade maven-resolver-utilUpgrade munge-maven-plugin-javadocUpgrade plexus-interactivity-jlineUpgrade plexus-velocityUpgrade xmvn-bisectUpgrade plexus-containers-container-defaultUpgrade plexus-bsh-factory-javadocUpgrade plexus-ant-factoryUpgrade munge-maven-pluginUpgrade maven-wagon-httpUpgrade maven-wagon-javadocUpgrade mojo-parentUpgrade maven-shared-io-javadocUpgrade maven-plugin-testing-javadocUpgrade maven-openjdk25Upgrade httpcomponents-clientUpgrade maven-doxia-logging-apiUpgrade jansi-debugsourceUpgrade aqute-bnd-javadocUpgrade xml-commons-resolver-javadocUpgrade antlr-C++Upgrade ant-apache-xalan2Upgrade easymockUpgrade maven-doxia-sitetools-javadocUpgrade maven-reporting-api-javadocUpgrade sisu-mojosUpgrade plexus-io-javadocUpgrade slf4j-jdk14Upgrade jdom2-javadocUpgrade slf4j-jclUpgrade os-maven-pluginUpgrade jzlib-demoUpgrade glassfish-el-apiUpgrade geronimo-parent-pomsUpgrade javapackages-localUpgrade apache-commons-loggingUpgrade jul-to-slf4jUpgrade glassfish-annotation-apiUpgrade plexus-build-api-javadocUpgrade maven-plugin-tools-javaUpgrade maven-install-pluginUpgrade apache-commons-jxpath-javadocUpgrade jdomUpgrade guice-extensionsUpgrade powermock-commonUpgrade xml-commons-apisUpgrade maven-surefire-provider-junitUpgrade apache-commons-parentUpgrade jflex-javadocUpgrade maven-wagonUpgrade hawtjni-runtimeUpgrade hamcrest-demoUpgrade objenesisUpgrade osgi-compendium-javadocUpgrade maven-openjdk8Upgrade maven-invoker-plugin-javadocUpgrade maven-cal10n-pluginUpgrade xmvn-apiUpgrade jdom-javadocUpgrade sonatype-oss-parentUpgrade plexus-components-pomUpgrade maven-wagon-http-sharedUpgrade maven-plugin-tools-generatorsUpgrade maven-jar-pluginUpgrade maven-doxia-testsUpgrade jvnet-parentUpgrade java_cup-javadocUpgrade jsch-javadocUpgrade atinject-javadocUpgrade apache-commons-io-javadocUpgrade apache-commons-exec-javadocUpgrade ant-jmfUpgrade ant-contribUpgrade xerces-j2Upgrade sisu-plexusUpgrade ant-commons-netUpgrade guava20-javadocUpgrade xmvn-tools-pomUpgrade jsr-305-javadocUpgrade apache-commons-execUpgrade osgi-core-javadocUpgrade weld-parentUpgrade slf4j-javadocUpgrade velocity-manualUpgrade plexus-resourcesUpgrade plexus-containers-component-metadataUpgrade maven-shared-utilsUpgrade maven-resolver-apiUpgrade jboss-parentUpgrade maven-plugin-tools-annotationsUpgrade maven-javadocUpgrade maven-doxia-module-aptUpgrade javapackages-filesystemUpgrade jakarta-commons-httpclient-manualUpgrade exec-maven-plugin-javadocUpgrade cal10nUpgrade ant-apache-bsfUpgrade apache-commons-lang3-javadocUpgrade plexus-classworldsUpgrade maven-failsafe-pluginUpgrade maven-resolverUpgrade xmvn-mojoUpgrade sisu-javadocUpgrade maven-plugin-pluginUpgrade maven-artifact-resolverUpgrade fusesource-pomUpgrade junit-javadocUpgrade jtidy-javadocUpgrade assertj-core-javadocUpgrade apache-resource-bundlesUpgrade antlr-toolUpgrade junitUpgrade apache-commons-ioUpgrade bsfUpgrade plexus-archiverUpgrade maven-plugin-toolsUpgrade xerces-j2-demoUpgrade velocityUpgrade powermock-reflectUpgrade plexus-interactivityUpgrade maven-unboundUpgrade maven-scriptUpgrade maven-plugin-bundleUpgrade maven-clean-plugin-javadocUpgrade maven-assembly-plugin-javadocUpgrade sisuUpgrade maven-remote-resources-pluginUpgrade maven-plugin-tools-antUpgrade maven-wagon-fileUpgrade maven-plugin-build-helperUpgrade jaxen-demoUpgrade maven-surefireUpgrade guavaUpgrade guice-servletUpgrade glassfish-annotation-api-javadocUpgrade cal10n-javadocUpgrade cdi-api-javadocUpgrade apache-commons-codec-javadocUpgrade bsh-manualUpgrade bcel-javadocUpgrade apache-commons-langUpgrade antlr-manualUpgrade ant-junitUpgrade spice-parentUpgrade maven-script-interpreter-javadocUpgrade guice-grapherUpgrade jcl-over-slf4jUpgrade testngUpgrade geronimo-annotation-javadocUpgrade xalan-j2-javadocUpgrade xz-java-javadoc | Jul 8, 2026 | Mar 25, 2026 |
| Rocky_linux | — | Upgrade byaccj-debugsourceUpgrade byaccjUpgrade antlr-C++Upgrade jansiUpgrade jansi-debuginfoUpgrade jansi-nativeUpgrade jansi-debugsourceUpgrade byaccj-debuginfo | Jul 15, 2026 | Jul 13, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub