Package · Ubuntu

plexus-utils

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

High 8.8

CVE-2025-67030

Plexus-Utils has a Directory Traversal vulnerability in its extractFile method

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

plexus-utils2 org.codehaus.plexus:plexus-utils plexus-utils2 plexus-utils Debian Ubuntu Maven

Mar 25, 2026
Critical 9.8

CVE-2017-1000487 Public exploit

OS Command Injection in Plexus-utils

Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.

plexus-utils2 org.codehaus.plexus:plexus-utils plexus-utils2 plexus-utils Debian Ubuntu Maven

Jan 3, 2018