Red Hat Security AdvisoryRHSA-2026:38514
plexus-utils security update
Released 2026-07-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) plexus-utils-3.5.1-9.el10_2
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) plexus-utils-javadoc-3.5.1-9.el10_2
Fixes 1 record
Priority MEDIUM 41
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00689 · Published 2026-03-25 · Partial fix · 4.0.3, 3.6.1 CWE-22
