Maven (Apache) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 29 known versions, newest CVE from 2021-04-23. Vendor: Apache.

CVEs of Maven

• CVE-2021-26291 - CVSS 9.1 (critical), 2021-04-23: Apache Maven will follow repositories that are defined in a dependency’s Project Object Model (pom) which may be surprising to some users, resulting in…
• CVE-2013-0253 - CVSS 5.8 (medium), 2013-04-09: The default configuration of Apache Maven 3.0.4, when using Maven Wagon 2.1, disables SSL certificate checks, which allows remote attackers to spoof servers…