Red Hat Security AdvisoryRHSA-2026:35996
maven:3.8 security update
Released 2026-07-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.8.8) apache-commons-cli-1.5.0-4.module+el8.8.0+18044+0a924b8f.noarch::maven:3.8, apache-commons-cli-1.5.0-4.module+el8.8.0+18044+0a924b8f.src::maven:3.8, apache-commons-codec-1.15-7.module+el8.8.0+18044+0a924b8f.noarch::maven:3.8 +47
- Red Hat Enterprise Linux AppStream TUS (v.8.8) apache-commons-cli-1.5.0-4.module+el8.8.0+18044+0a924b8f.noarch::maven:3.8, apache-commons-cli-1.5.0-4.module+el8.8.0+18044+0a924b8f.src::maven:3.8, apache-commons-codec-1.15-7.module+el8.8.0+18044+0a924b8f.noarch::maven:3.8 +47
Fixes 1 record
Priority MEDIUM 41
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00689 · Published 2026-03-25 · Partial fix · 4.0.3, 3.6.1 CWE-22
