Red Hat Security AdvisoryRHSA-2026:38500
maven:3.9 security update
Released 2026-07-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) aopalliance-1.0-51.module+el9.8.0+24092+eb9f67d0.noarch::maven:3.9, aopalliance-1.0-51.module+el9.8.0+24092+eb9f67d0.src::maven:3.9, apache-commons-cli-1.9.0-4.module+el9.8.0+24092+eb9f67d0.noarch::maven:3.9 +47
Fixes 1 record
Priority MEDIUM 41
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00689 · Published 2026-03-25 · Partial fix · 4.0.3, 3.6.1 CWE-22
