Red Hat Security AdvisoryRHSA-2026:40841
maven:3.8 security update
Released 2026-07-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) apache-commons-cli-1.5.0-5.module+el8.10.0+21301+657f54a3.noarch::maven:3.8, apache-commons-cli-1.5.0-5.module+el8.10.0+21301+657f54a3.src::maven:3.8, apache-commons-codec-1.15-8.module+el8.10.0+21301+657f54a3.noarch::maven:3.8 +47
Fixes 1 record
Priority MEDIUM 41
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00689 · Published 2026-03-25 · Partial fix · 4.0.3, 3.6.1 CWE-22
