All products

net.sourceforge.pmd:pmd-core

Maven · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
PMD Designer has Stored XSS in VBHTMLRenderer and YAHTMLRenderer via unescaped violation messagesCVE-2026-28338 · GHSA-8RR6-2QW5-PC7R net.sourceforge.pmd:pmd-core Maven Medium Fix reported
PMD Designer's release key passphrase (GPG) available on Maven Central in cleartextCVE-2025-23215 · GHSA-88M4-H43F-WX84 net.sourceforge.pmd:pmd-corenet.sourceforge.pmd:pmd-designer Maven Critical Fix reported
Improper Restriction of XML External Entity Reference in PMDCVE-2019-7722 · GHSA-57QJ-79GH-69W8 net.sourceforge.pmd:pmd-core Maven High Fix reported