Red Hat Security AdvisoryRHSA-2026:35991
plexus-utils security update
Released 2026-07-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) plexus-utils-3.5.1-8.el10_0.1
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) plexus-utils-javadoc-3.5.1-8.el10_0.1
Fixes 1 record
Priority MEDIUM 41
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00689 · Published 2026-03-25 · Partial fix · 4.0.3, 3.6.1 CWE-22
