Red Hat Enterprise Linux 7/maven-wagon

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
jsoup XmlTreeBuilder vulnerable to memory exhaustion through deeply nested namespace declarationsCVE-2026-75140 · GHSA-65R4-943X-97JJ	org.jsoup:jsoup Exploit Intelligence/exploit-intelligence/agent-client-rhel9	MavenRed Hat	High	Fix reported	2026-10-06
jsoup: Cleaner may expose markup with custom raw-text elementsCVE-2026-71497 · GHSA-PMHH-3W7G-XQP8	org.jsoup:jsoup Cryostat 4/jsoup	MavenRed Hat	Medium	Fix reported	2026-09-10
Plexus-Utils has a Directory Traversal vulnerability in its extractFile method CVE-2025-67030 · GHSA-6FMV-XXPF-W3CW	org.codehaus.plexus:plexus-utils OpenShift Developer Tools and Services/jenkins-2-plugins	MavenRed Hat	High	Fix reported	2026-09-10
Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputsCVE-2025-48924 · GHSA-J288-Q9X7-2F5V	commons-lang:commons-lang org.apache.commons:commons-lang3	MavenRed Hat	Medium	Fix reported	2026-09-10
UNSUPPORTED WHEN ASSIGNED GzipHandler causes part of request body to be seen as request body of a separate requestCVE-2024-13009 · GHSA-Q4RV-GQ96-W7C5	org.eclipse.jetty:jetty-server A-MQ Clients 2/jetty-server	MavenRed Hat	High	Fix reported	2026-09-10
org.apache.sshd/sshd-core: Apache MINA SSHD: Authentication bypass via duplicate public key presentationCVE-2026-93994	OpenShift Developer Tools and Services/jenkins-2-plugins OpenShift Developer Tools and Services/jenkins	Red Hat	High	No fix reported	Not recorded