pmd
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| pmd | 2 | – | Feb 27, 2026 |
Exploited and recent CVEs
- CVE-2026-28338 PMD Designer has Stored XSS in VBHTMLRenderer and YAHTMLRenderer via unescaped violation messages 0.3%
- CVE-2025-23215 PMD Designer's release key passphrase (GPG) available on Maven Central in cleartext 0.3%