Vulnerability · Published Mar 25, 2026 · Assigned by mitre

CVE-2025-67030

High 8.8

In plain English

A high-severity path traversal in the ant package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)0.7%top 47.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
AlmaLinux:8	ant	1.10.5-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	ant-antlr	1.10.5-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	ant-apache-bcel	1.10.5-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	ant-apache-bsf	1.10.5-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	ant-apache-log4j	1.10.5-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	ant-apache-oro	1.10.5-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	ant-apache-regexp	1.10.5-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	ant-apache-resolver	1.10.5-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	ant-apache-xalan2	1.10.5-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	ant-commons-logging	1.10.5-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	ant-commons-net	1.10.5-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	ant-contrib	1.0-0.32.b3.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	ant-contrib-javadoc	1.0-0.32.b3.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	ant-javadoc	1.10.5-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	ant-javamail	1.10.5-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	ant-jdepend	1.10.5-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	ant-jmf	1.10.5-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	ant-jsch	1.10.5-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	ant-junit	1.10.5-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	ant-lib	1.10.5-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	ant-manual	1.10.5-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	ant-swing	1.10.5-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	ant-testutil	1.10.5-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	ant-xz	1.10.5-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	antlr-C++	2.7.7-56.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	antlr-C++	2.7.7-56.module_el8.5.0+197+0c7f4e0a	ALSA-2026:41948
AlmaLinux:8	antlr-C++	2.7.7-56.module_el8.6.0+3182+f8468cf8	ALSA-2026:41948
AlmaLinux:8	antlr-javadoc	2.7.7-56.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	antlr-manual	2.7.7-56.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	antlr-tool	2.7.7-56.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	aopalliance	1.0-17.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:9	aopalliance	1.0-51.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux:8	aopalliance-javadoc	1.0-17.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	apache-commons-beanutils	1.9.3-5.module_el8.10.0+4020+7deec6e4	ALSA-2026:41948
AlmaLinux:8	apache-commons-beanutils-javadoc	1.9.3-5.module_el8.10.0+4020+7deec6e4	ALSA-2026:41948
AlmaLinux:8	apache-commons-cli	1.4-4.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	apache-commons-cli	1.5.0-5.module_el8.10.0+3805+55513176	ALSA-2026:40841
AlmaLinux:9	apache-commons-cli	1.9.0-4.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux:8	apache-commons-cli-javadoc	1.4-4.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	apache-commons-codec	1.11-3.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	apache-commons-codec	1.15-8.module_el8.10.0+3805+55513176	ALSA-2026:40841
AlmaLinux:9	apache-commons-codec	1.17.1-8.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux:8	apache-commons-codec-javadoc	1.11-3.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	apache-commons-collections	3.2.2-10.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	apache-commons-collections-javadoc	3.2.2-10.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	apache-commons-collections-testframework	3.2.2-10.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	apache-commons-compress	1.18-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	apache-commons-compress-javadoc	1.18-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	apache-commons-exec	1.3-8.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	apache-commons-exec-javadoc	1.3-8.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	apache-commons-io	1:2.11.0-3.module_el8.10.0+3805+55513176	ALSA-2026:40841
AlmaLinux:8	apache-commons-io	1:2.6-3.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:9	apache-commons-io	1:2.16.1-9.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux:8	apache-commons-io-javadoc	1:2.6-3.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	apache-commons-jxpath	1.3-29.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	apache-commons-jxpath-javadoc	1.3-29.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	apache-commons-lang	2.6-21.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	apache-commons-lang-javadoc	2.6-21.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	apache-commons-lang3	3.7-3.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	apache-commons-lang3	3.12.0-8.module_el8.10.0+3805+55513176	ALSA-2026:40841
AlmaLinux:8	apache-commons-lang3-javadoc	3.7-3.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	apache-commons-logging	1.2-13.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	apache-commons-logging-javadoc	1.2-13.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	apache-commons-net	3.6-3.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	apache-commons-net-javadoc	3.6-3.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	apache-commons-parent	43-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	apache-ivy	2.4.0-14.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	apache-ivy-javadoc	2.4.0-14.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	apache-parent	19-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	apache-resource-bundles	2-20.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	aqute-bnd	3.5.0-4.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	aqute-bnd-javadoc	3.5.0-4.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	aqute-bndlib	3.5.0-4.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	assertj-core	3.8.0-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	assertj-core-javadoc	3.8.0-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	atinject	1.0.5-5.module_el8.10.0+3805+55513176	ALSA-2026:40841
AlmaLinux:8	atinject	1-28.20100611svn86.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:9	atinject	1.0.5-14.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux:8	atinject-javadoc	1-28.20100611svn86.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	atinject-tck	1-28.20100611svn86.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	bcel	6.2-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	bcel-javadoc	6.2-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	beust-jcommander	1.71-5.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	beust-jcommander-javadoc	1.71-5.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	bnd-maven-plugin	3.5.0-4.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	bsf	2.4.0-30.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	bsf-javadoc	2.4.0-30.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	bsh	2.0-13.b6.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	bsh-javadoc	2.0-13.b6.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	bsh-manual	2.0-13.b6.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	byaccj	1.15-17.module_el8.6.0+3182+f8468cf8	ALSA-2026:41948
AlmaLinux:8	byaccj	1.15-17.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	byaccj	1.15-17.module_el8.5.0+197+0c7f4e0a	ALSA-2026:41948
AlmaLinux:8	cal10n	0.8.1-7.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	cal10n-javadoc	0.8.1-7.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	cdi-api	2.0.2-7.module_el8.10.0+3805+55513176	ALSA-2026:40841
AlmaLinux:8	cdi-api	1.2-8.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	cdi-api-javadoc	1.2-8.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	cglib	3.2.4-7.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	cglib-javadoc	3.2.4-7.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	easymock	3.5-4.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	easymock-javadoc	3.5-4.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	exec-maven-plugin	1.6.0-3.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	exec-maven-plugin-javadoc	1.6.0-3.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	felix-osgi-compendium	1.4.0-26.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	felix-osgi-compendium-javadoc	1.4.0-26.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	felix-osgi-core	1.4.0-23.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	felix-osgi-core-javadoc	1.4.0-23.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	felix-osgi-foundation	1.2.0-23.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	felix-osgi-foundation-javadoc	1.2.0-23.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	felix-parent	4-5.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	felix-utils	1.10.4-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	felix-utils-javadoc	1.10.4-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	forge-parent	38-11.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	fusesource-pom	1.11-3.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	geronimo-annotation	1.0-23.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	geronimo-annotation-javadoc	1.0-23.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	geronimo-jms	1.1.1-25.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	geronimo-jms-javadoc	1.1.1-25.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	geronimo-jpa	1.1.1-21.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	geronimo-jpa-javadoc	1.1.1-21.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	geronimo-parent-poms	1.6-25.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	glassfish-annotation-api	1.2-13.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	glassfish-annotation-api-javadoc	1.2-13.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	glassfish-el	3.0.1-0.7.b08.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	glassfish-el-api	3.0.1-0.7.b08.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	glassfish-el-javadoc	3.0.1-0.7.b08.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	glassfish-jsp-api	2.3.2-0.9.b01.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	glassfish-jsp-api-javadoc	2.3.2-0.9.b01.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	glassfish-legal	1.1-11.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	glassfish-master-pom	8-11.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	glassfish-servlet-api	3.1.0-14.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	glassfish-servlet-api-javadoc	3.1.0-14.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	google-guice	4.1-11.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	google-guice	4.2.3-10.module_el8.10.0+3805+55513176	ALSA-2026:40841
AlmaLinux:9	google-guice	5.1.0-23.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux:8	google-guice-javadoc	4.1-11.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	guava	31.0.1-5.module_el8.10.0+3805+55513176	ALSA-2026:40841
AlmaLinux:9	guava	33.3.0-5.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux:8	guava20	20.0-8.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	guava20-javadoc	20.0-8.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	guava20-testlib	20.0-8.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	guice-assistedinject	4.1-11.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	guice-bom	4.1-11.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	guice-extensions	4.1-11.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	guice-grapher	4.1-11.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	guice-jmx	4.1-11.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	guice-jndi	4.1-11.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	guice-multibindings	4.1-11.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	guice-parent	4.1-11.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	guice-servlet	4.1-11.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	guice-testlib	4.1-11.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	guice-throwingproviders	4.1-11.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	hamcrest	1.3-23.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	hamcrest-core	1.3-23.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	hamcrest-demo	1.3-23.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	hamcrest-javadoc	1.3-23.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	hawtjni	1.16-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	hawtjni-javadoc	1.16-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	hawtjni-runtime	1.16-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	httpcomponents-client	4.5.5-4.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	httpcomponents-client	4.5.13-6.module_el8.10.0+3805+55513176	ALSA-2026:40841
AlmaLinux:9	httpcomponents-client	4.5.14-21.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux:8	httpcomponents-client-cache	4.5.5-4.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	httpcomponents-client-javadoc	4.5.5-4.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	httpcomponents-core	4.4.10-4.module_el8.10.0+4020+7deec6e4	ALSA-2026:41948
AlmaLinux:8	httpcomponents-core	4.4.13-8.module_el8.10.0+3805+55513176	ALSA-2026:40841
AlmaLinux:9	httpcomponents-core	4.4.16-21.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux:8	httpcomponents-core-javadoc	4.4.10-4.module_el8.10.0+4020+7deec6e4	ALSA-2026:41948
AlmaLinux:8	httpcomponents-project	9-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	isorelax	1:0-0.23.release20050331.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	isorelax-javadoc	1:0-0.23.release20050331.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	ivy-local	5.3.0-2.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	jakarta-annotations	1.3.5-15.module_el8.10.0+3805+55513176	ALSA-2026:40841
AlmaLinux:9	jakarta-annotations	1.3.5-38.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux:8	jakarta-commons-httpclient	1:3.1-28.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	jakarta-commons-httpclient-demo	1:3.1-28.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	jakarta-commons-httpclient-javadoc	1:3.1-28.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	jakarta-commons-httpclient-manual	1:3.1-28.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	jakarta-oro	2.0.8-23.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	jakarta-oro-javadoc	2.0.8-23.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	jansi	1.17.1-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	jansi	2.4.0-7.module_el8.10.0+3805+55513176	ALSA-2026:40841
AlmaLinux:9	jansi	2.4.1-12.module_el9.6.0+148+fb6dc857	ALSA-2026:38500
AlmaLinux:8	jansi-javadoc	1.17.1-1.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	jansi-native	1.7-7.module_el8.5.0+197+0c7f4e0a	ALSA-2026:41948
AlmaLinux:8	jansi-native	1.7-7.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	jansi-native	1.7-7.module_el8.6.0+3182+f8468cf8	ALSA-2026:41948
AlmaLinux:8	jansi-native-javadoc	1.7-7.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	java_cup	1:0.11b-8.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	java_cup-javadoc	1:0.11b-8.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	java_cup-manual	1:0.11b-8.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	javacc	7.0.2-6.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	javacc-demo	7.0.2-6.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	javacc-javadoc	7.0.2-6.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	javacc-manual	7.0.2-6.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	javacc-maven-plugin	2.6-25.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	javacc-maven-plugin-javadoc	2.6-25.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	javamail	1.5.2-7.module_el8.0.0+6004+2fc32706	ALSA-2026:41948
AlmaLinux:8	javamail-javadoc	1.5.2-7.module_el8.0.0+6004+2fc32706	ALSA-2026:41948

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

https://github.com/codehaus-plexus/plexus-utils/pull/295
https://github.com/codehaus-plexus/plexus-utils/issues/294
https://github.com/codehaus-plexus/plexus-utils/commit/6d780b3378829318ba5c2d29547e0012d5b29642
https://github.com/codehaus-plexus/plexus-utils/pull/296
https://gist.github.com/weaver4VD/3216dac645220f8c9b488362f61241ec
https://access.redhat.com/security/cve/CVE-2025-67030 vdb-entry, x_refsource_REDHAT
RHBZ#2451409 issue-tracking, x_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-67030.json x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:18054 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:18055 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35991 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:38514 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40841 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35996 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35990 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35992 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36012 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35997 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:38500 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:38796 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41948 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60247 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60249 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60248 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60239 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60251 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60246 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60250 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60252 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60259 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60254 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60256 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:18059 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65126 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17668 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:7109 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:7380 vendor-advisory, x_refsource_REDHAT