org.pf4j:pf4j
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| pf4j is vulnerable to Path Traversal or Zip Slip attack through improper handling of zip entry names | org.pf4j:pf4j | Maven | High | Fix reported | |
| pf4j vulnerable to remote code execution via expandIfZip method in the extract function | org.pf4j:pf4j | Maven | High | No fix reported | |
| pf4j vulnerable to remote code execution via loadpluginPath parameter | org.pf4j:pf4j | Maven | High | No fix reported | |
| pf4j vulnerable to remote code execution via the zippluginPath parameter | org.pf4j:pf4j | Maven | High | No fix reported |