Apache Maven (Apache Software Foundation) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-05-23. Vendor: Apache Software Foundation.

CVEs of Apache Maven

• CVE-2022-29599 - CVSS 9.8 (critical), 2022-05-23: In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell…
• CVE-2021-26291 - CVSS 9.1 (critical), 2021-04-23: Apache Maven will follow repositories that are defined in a dependency’s Project Object Model (pom) which may be surprising to some users, resulting in…