Pmd vulnerabilities
We track 1 vulnerability in Pmd products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 31, 2025.
1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score
Latest Pmd vulnerabilities
- 9.3 Critical severity
pmd: Exposure of Sensitive Information to an Unauthorized Actor
PMD is an extensible multilanguage static code analyzer. The passphrase for the PMD and PMD Designer release signing keys are included in jar published to Maven Central. The private key itself is not known to have been compromised itself, but given its passphr