Package · Wolfi

maven-stage0

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 8.2

CVE-2026-102554

Denial of Service via Eager Array Allocation During Deserialization in Guava

Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashS…

Google Guava druid thingsboard-tb-node Debian Ubuntu Azure Linux Wolfi Maven

Oct 9, 2026
High 8.8

CVE-2025-67030

Plexus-Utils has a Directory Traversal vulnerability in its extractFile method

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

druid akhq dependency-track-bundled dependency-track Debian Ubuntu Azure Linux Wolfi Maven

Mar 25, 2026