Maven Shared Utils vulnerabilities

1 known vulnerability in Maven Shared Utils from Apache. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Apache Maven: Improper Encoding or Escaping of Output

  CVE-2022-29599May 23, 2022ApacheEPSS 4.42%

  In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.