🛡️ RLSA-2026:41948 — ant

⚪ Unknown ✅ No Known Exploit OSV
N/A
CVSS Score
0 Low4 Medium7 High9 Critical10

Description

Important: javapackages-tools:201801 security update

The javapackages-tools packages provide macros and scripts to support Java packaging.

Security Fix(es):

  • org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

How this vulnerability can be exploited

This issue can be reached over the network, attack complexity is low, an attacker needs no privileges on the target. No user interaction is required. The scope is changed, meaning a successful attack can affect components beyond the vulnerable one. Rated impact: confidentiality low, integrity low, availability low.

Affected software

RLSA-2026:41948 is recorded against 182 packages.

  • ant (fixed in 0:1.10.5-1.module+el8.10.0+2003+8aeac9cb)
  • ant-contrib (fixed in 0:1.0-0.32.b3.module+el8.3.0+74+855e3f5d)
  • antlr (fixed in 0:2.7.7-56.module+el8.3.0+74+855e3f5d)
  • aopalliance (fixed in 0:1.0-17.module+el8.3.0+74+855e3f5d)
  • apache-commons-beanutils (fixed in 0:1.9.3-5.module+el8.10.0+2003+8aeac9cb)
  • apache-commons-cli (fixed in 0:1.4-4.module+el8.10.0+2003+8aeac9cb)
  • apache-commons-codec (fixed in 0:1.11-3.module+el8.10.0+2003+8aeac9cb)
  • apache-commons-collections (fixed in 0:3.2.2-10.module+el8.3.0+74+855e3f5d)
  • apache-commons-compress (fixed in 0:1.18-1.module+el8.3.0+74+855e3f5d)
  • apache-commons-exec (fixed in 0:1.3-8.module+el8.3.0+74+855e3f5d)
  • apache-commons-io (fixed in 1:2.6-3.module+el8.3.0+74+855e3f5d)
  • apache-commons-jxpath (fixed in 0:1.3-29.module+el8.3.0+74+855e3f5d)
  • apache-commons-lang (fixed in 0:2.6-21.module+el8.3.0+74+855e3f5d)
  • apache-commons-lang3 (fixed in 0:3.7-3.module+el8.10.0+2003+8aeac9cb)
  • apache-commons-logging (fixed in 0:1.2-13.module+el8.3.0+74+855e3f5d)
  • apache-commons-net (fixed in 0:3.6-3.module+el8.3.0+74+855e3f5d)
  • apache-commons-parent (fixed in 0:43-2.module+el8.3.0+74+855e3f5d)
  • apache-ivy (fixed in 0:2.4.0-14.module+el8.3.0+74+855e3f5d)
  • apache-parent (fixed in 0:19-2.module+el8.3.0+74+855e3f5d)
  • apache-resource-bundles (fixed in 0:2-20.module+el8.3.0+74+855e3f5d)
  • aqute-bnd (fixed in 0:3.5.0-4.module+el8.3.0+74+855e3f5d)
  • assertj-core (fixed in 0:3.8.0-2.module+el8.3.0+74+855e3f5d)
  • atinject (fixed in 0:1-28.20100611svn86.module+el8.3.0+74+855e3f5d)
  • bcel (fixed in 0:6.2-2.module+el8.3.0+74+855e3f5d)
Show the remaining 158 packages
  • beust-jcommander (fixed in 0:1.71-5.module+el8.3.0+74+855e3f5d)
  • bsf (fixed in 0:2.4.0-30.module+el8.3.0+74+855e3f5d)
  • bsh (fixed in 0:2.0-13.b6.module+el8.3.0+74+855e3f5d)
  • byaccj (fixed in 0:1.15-17.module+el8.10.0+2003+8aeac9cb)
  • cal10n (fixed in 0:0.8.1-7.module+el8.3.0+74+855e3f5d)
  • cdi-api (fixed in 0:1.2-8.module+el8.3.0+74+855e3f5d)
  • cglib (fixed in 0:3.2.4-7.module+el8.3.0+74+855e3f5d)
  • easymock (fixed in 0:3.5-4.module+el8.3.0+74+855e3f5d)
  • exec-maven-plugin (fixed in 0:1.6.0-3.module+el8.3.0+74+855e3f5d)
  • felix-osgi-compendium (fixed in 0:1.4.0-26.module+el8.3.0+74+855e3f5d)
  • felix-osgi-core (fixed in 0:1.4.0-23.module+el8.3.0+74+855e3f5d)
  • felix-osgi-foundation (fixed in 0:1.2.0-23.module+el8.3.0+74+855e3f5d)
  • felix-parent (fixed in 0:4-5.module+el8.3.0+74+855e3f5d)
  • felix-utils (fixed in 0:1.10.4-2.module+el8.3.0+74+855e3f5d)
  • forge-parent (fixed in 0:38-11.module+el8.3.0+74+855e3f5d)
  • fusesource-pom (fixed in 0:1.11-3.module+el8.3.0+74+855e3f5d)
  • geronimo-annotation (fixed in 0:1.0-23.module+el8.3.0+74+855e3f5d)
  • geronimo-jms (fixed in 0:1.1.1-25.module+el8.3.0+74+855e3f5d)
  • geronimo-jpa (fixed in 0:1.1.1-21.module+el8.3.0+74+855e3f5d)
  • geronimo-parent-poms (fixed in 0:1.6-25.module+el8.3.0+74+855e3f5d)
  • glassfish-annotation-api (fixed in 0:1.2-13.module+el8.10.0+2003+8aeac9cb)
  • glassfish-el (fixed in 0:3.0.1-0.7.b08.module+el8.10.0+2003+8aeac9cb)
  • glassfish-jsp-api (fixed in 0:2.3.2-0.9.b01.module+el8.10.0+2003+8aeac9cb)
  • glassfish-legal (fixed in 0:1.1-11.module+el8.3.0+74+855e3f5d)
  • glassfish-master-pom (fixed in 0:8-11.module+el8.3.0+74+855e3f5d)
  • glassfish-servlet-api (fixed in 0:3.1.0-14.module+el8.3.0+74+855e3f5d)
  • google-guice (fixed in 0:4.1-11.module+el8.10.0+2003+8aeac9cb)
  • guava20 (fixed in 0:20.0-8.module+el8.3.0+74+855e3f5d)
  • hamcrest (fixed in 0:1.3-23.module+el8.3.0+74+855e3f5d)
  • hawtjni (fixed in 0:1.16-2.module+el8.3.0+74+855e3f5d)
  • httpcomponents-client (fixed in 0:4.5.5-4.module+el8.3.0+74+855e3f5d)
  • httpcomponents-core (fixed in 0:4.4.10-4.module+el8.10.0+2003+8aeac9cb)
  • httpcomponents-project (fixed in 0:9-2.module+el8.3.0+74+855e3f5d)
  • isorelax (fixed in 1:0-0.23.release20050331.module+el8.3.0+74+855e3f5d)
  • jakarta-commons-httpclient (fixed in 1:3.1-28.module+el8.3.0+74+855e3f5d)
  • jakarta-oro (fixed in 0:2.0.8-23.module+el8.3.0+74+855e3f5d)
  • jansi (fixed in 0:1.17.1-1.module+el8.10.0+2003+8aeac9cb)
  • jansi-native (fixed in 0:1.7-7.module+el8.3.0+74+855e3f5d)
  • java-cup (fixed in 1:0.11b-8.module+el8.3.0+74+855e3f5d)
  • javacc (fixed in 0:7.0.2-6.module+el8.3.0+74+855e3f5d)
  • javacc-maven-plugin (fixed in 0:2.6-25.module+el8.3.0+74+855e3f5d)
  • javamail (fixed in 0:1.5.2-7.module+el8.3.0+74+855e3f5d)
  • javapackages-tools (fixed in 0:5.3.0-2.module+el8.3.0+74+855e3f5d)
  • javassist (fixed in 0:3.18.1-8.module+el8.3.0+74+855e3f5d)
  • jaxen (fixed in 0:1.1.6-18.module+el8.3.0+74+855e3f5d)
  • jboss-interceptors-1.2-api (fixed in 0:1.0.0-8.module+el8.3.0+74+855e3f5d)
  • jboss-parent (fixed in 0:20-4.module+el8.3.0+74+855e3f5d)
  • jdepend (fixed in 0:2.9.1-18.module+el8.3.0+74+855e3f5d)
  • jdependency (fixed in 0:1.2-2.module+el8.3.0+74+855e3f5d)
  • jdom (fixed in 0:1.1.3-17.module+el8.3.0+74+855e3f5d)
  • jdom2 (fixed in 0:2.0.6-12.module+el8.3.0+74+855e3f5d)
  • jflex (fixed in 0:1.6.1-12.module+el8.3.0+74+855e3f5d)
  • jline (fixed in 0:2.14.6-2.module+el8.3.0+74+855e3f5d)
  • jsch (fixed in 0:0.1.54-6.module+el8.3.0+74+855e3f5d)
  • jsoup (fixed in 0:1.11.3-3.module+el8.10.0+2003+8aeac9cb)
  • jsr-305 (fixed in 0:0-0.22.20130910svn.module+el8.3.0+74+855e3f5d)
  • jtidy (fixed in 2:1.0-0.28.20100930svn1125.module+el8.3.0+74+855e3f5d)
  • junit (fixed in 1:4.12-9.module+el8.3.0+74+855e3f5d)
  • jvnet-parent (fixed in 0:4-10.module+el8.3.0+74+855e3f5d)
  • jzlib (fixed in 0:1.1.3-8.module+el8.10.0+2003+8aeac9cb)
  • log4j12 (fixed in 0:1.2.17-22.module+el8.3.0+74+855e3f5d)
  • maven (fixed in 1:3.5.4-5.module+el8.3.0+74+855e3f5d)
  • maven-antrun-plugin (fixed in 0:1.8-6.module+el8.3.0+74+855e3f5d)
  • maven-archiver (fixed in 0:3.2.0-2.module+el8.3.0+74+855e3f5d)
  • maven-artifact-resolver (fixed in 1:1.0-18.module+el8.3.0+74+855e3f5d)
  • maven-artifact-transfer (fixed in 1:0.9.0-4.module+el8.3.0+74+855e3f5d)
  • maven-assembly-plugin (fixed in 0:3.1.0-3.module+el8.3.0+74+855e3f5d)
  • maven-clean-plugin (fixed in 0:3.0.0-5.module+el8.3.0+74+855e3f5d)
  • maven-common-artifact-filters (fixed in 0:3.0.1-4.module+el8.3.0+74+855e3f5d)
  • maven-compiler-plugin (fixed in 0:3.7.0-2.module+el8.3.0+74+855e3f5d)
  • maven-dependency-analyzer (fixed in 0:1.8-2.module+el8.3.0+74+855e3f5d)
  • maven-dependency-plugin (fixed in 0:3.0.2-2.module+el8.3.0+74+855e3f5d)
  • maven-dependency-tree (fixed in 0:3.0-5.module+el8.3.0+74+855e3f5d)
  • maven-doxia (fixed in 0:1.7-8.module+el8.3.0+74+855e3f5d)
  • maven-doxia-sitetools (fixed in 0:1.7.5-2.module+el8.3.0+74+855e3f5d)
  • maven-enforcer (fixed in 0:1.4.1-8.module+el8.3.0+74+855e3f5d)
  • maven-file-management (fixed in 1:3.0.0-5.module+el8.3.0+74+855e3f5d)
  • maven-filtering (fixed in 0:3.1.1-5.module+el8.3.0+74+855e3f5d)
  • maven-install-plugin (fixed in 0:2.5.2-7.module+el8.3.0+74+855e3f5d)
  • maven-invoker (fixed in 0:2.2-7.module+el8.3.0+74+855e3f5d)
  • maven-invoker-plugin (fixed in 0:1.10-7.module+el8.3.0+74+855e3f5d)
  • maven-jar-plugin (fixed in 0:3.1.0-1.module+el8.3.0+74+855e3f5d)
  • maven-parent (fixed in 0:27-5.module+el8.3.0+74+855e3f5d)
  • maven-plugin-build-helper (fixed in 0:1.9.1-8.module+el8.3.0+74+855e3f5d)
  • maven-plugin-bundle (fixed in 0:3.5.0-2.module+el8.3.0+74+855e3f5d)
  • maven-plugin-testing (fixed in 0:3.3.0-12.module+el8.3.0+74+855e3f5d)
  • maven-plugin-tools (fixed in 0:3.5.1-4.module+el8.3.0+74+855e3f5d)
  • maven-plugins-pom (fixed in 0:28-7.module+el8.3.0+74+855e3f5d)
  • maven-remote-resources-plugin (fixed in 0:1.5-2.module+el8.3.0+74+855e3f5d)
  • maven-reporting-api (fixed in 1:3.0-14.module+el8.3.0+74+855e3f5d)
  • maven-reporting-impl (fixed in 0:3.0.0-4.module+el8.3.0+74+855e3f5d)
  • maven-resolver (fixed in 1:1.1.1-2.module+el8.3.0+74+855e3f5d)
  • maven-resources-plugin (fixed in 0:3.1.0-3.module+el8.3.0+74+855e3f5d)
  • maven-script-interpreter (fixed in 0:1.1-11.module+el8.3.0+74+855e3f5d)
  • maven-shade-plugin (fixed in 0:3.1.0-3.module+el8.3.0+74+855e3f5d)
  • maven-shared (fixed in 0:22-6.module+el8.3.0+74+855e3f5d)
  • maven-shared-incremental (fixed in 0:1.1-14.module+el8.3.0+74+855e3f5d)
  • maven-shared-io (fixed in 1:3.0.0-5.module+el8.3.0+74+855e3f5d)
  • maven-shared-utils (fixed in 0:3.2.1-0.1.module+el8.3.0+74+855e3f5d)
  • maven-source-plugin (fixed in 0:3.0.1-4.module+el8.3.0+74+855e3f5d)
  • maven-surefire (fixed in 0:2.22.0-3.module+el8.3.0+74+855e3f5d)
  • maven-verifier (fixed in 0:1.6-6.module+el8.3.0+74+855e3f5d)
  • maven-wagon (fixed in 0:3.1.0-1.module+el8.3.0+74+855e3f5d)
  • maven2 (fixed in 0:2.2.1-59.module+el8.3.0+74+855e3f5d)
  • mockito (fixed in 0:1.10.19-17.module+el8.3.0+74+855e3f5d)
  • modello (fixed in 0:1.9.1-7.module+el8.3.0+74+855e3f5d)
  • mojo-parent (fixed in 0:40-6.module+el8.3.0+74+855e3f5d)
  • munge-maven-plugin (fixed in 0:1.0-11.module+el8.3.0+74+855e3f5d)
  • objectweb-asm (fixed in 0:6.2-5.module+el8.3.0+74+855e3f5d)
  • objectweb-pom (fixed in 0:1.5-7.module+el8.3.0+74+855e3f5d)
  • objenesis (fixed in 0:2.6-2.module+el8.3.0+74+855e3f5d)
  • os-maven-plugin (fixed in 0:1.2.3-9.module+el8.3.0+74+855e3f5d)
  • osgi-annotation (fixed in 0:6.0.0-7.module+el8.3.0+74+855e3f5d)
  • osgi-compendium (fixed in 0:6.0.0-5.module+el8.3.0+74+855e3f5d)
  • osgi-core (fixed in 0:6.0.0-6.module+el8.3.0+74+855e3f5d)
  • plexus-ant-factory (fixed in 0:1.0-0.20.a2.2.module+el8.3.0+74+855e3f5d)
  • plexus-archiver (fixed in 0:3.6.0-1.module+el8.3.0+74+855e3f5d)
  • plexus-bsh-factory (fixed in 0:1.0-0.19.a7.module+el8.3.0+74+855e3f5d)
  • plexus-build-api (fixed in 0:0.0.7-20.module+el8.3.0+74+855e3f5d)
  • plexus-cipher (fixed in 0:1.7-14.module+el8.10.0+2003+8aeac9cb)
  • plexus-classworlds (fixed in 0:2.5.2-9.module+el8.10.0+2003+8aeac9cb)
  • plexus-cli (fixed in 0:1.6-6.module+el8.3.0+74+855e3f5d)
  • plexus-compiler (fixed in 0:2.8.2-2.module+el8.3.0+74+855e3f5d)
  • plexus-component-api (fixed in 0:1.0-0.24.alpha15.module+el8.3.0+74+855e3f5d)
  • plexus-component-factories-pom (fixed in 0:1.0-0.15.alpha11.module+el8.3.0+74+855e3f5d)
  • plexus-components-pom (fixed in 0:1.3.1-10.module+el8.3.0+74+855e3f5d)
  • plexus-containers (fixed in 0:1.7.1-8.module+el8.3.0+74+855e3f5d)
  • plexus-i18n (fixed in 0:1.0-0.11.b10.4.module+el8.3.0+74+855e3f5d)
  • plexus-interactivity (fixed in 0:1.0-0.27.alpha6.module+el8.3.0+74+855e3f5d)
  • plexus-interpolation (fixed in 0:1.22-9.module+el8.10.0+2003+8aeac9cb)
  • plexus-io (fixed in 0:3.0.0-2.module+el8.3.0+74+855e3f5d)
  • plexus-languages (fixed in 0:0.9.10-3.module+el8.3.0+74+855e3f5d)
  • plexus-pom (fixed in 0:5.0-2.module+el8.3.0+74+855e3f5d)
  • plexus-resources (fixed in 0:1.0-0.23.a7.module+el8.3.0+74+855e3f5d)
  • plexus-sec-dispatcher (fixed in 0:1.4-26.module+el8.10.0+2003+8aeac9cb)
  • plexus-utils (fixed in 0:3.1.0-3.module+el8.3.0+74+855e3f5d)
  • plexus-velocity (fixed in 0:1.2-4.module+el8.3.0+74+855e3f5d)
  • powermock (fixed in 0:1.6.5-9.module+el8.3.0+74+855e3f5d)
  • qdox (fixed in 0:2.0-3.M9.module+el8.3.0+74+855e3f5d)
  • regexp (fixed in 1:1.5-26.module+el8.3.0+74+855e3f5d)
  • sisu (fixed in 1:0.3.3-7.module+el8.10.0+2003+8aeac9cb)
  • sisu-mojos (fixed in 0:0.3.1-8.module+el8.3.0+74+855e3f5d)
  • slf4j (fixed in 0:1.7.25-4.module+el8.3.0+74+855e3f5d)
  • sonatype-oss-parent (fixed in 0:7-14.module+el8.3.0+74+855e3f5d)
  • sonatype-plugins-parent (fixed in 0:8-12.module+el8.3.0+74+855e3f5d)
  • spec-version-maven-plugin (fixed in 0:1.2-11.module+el8.3.0+74+855e3f5d)
  • spice-parent (fixed in 0:26-8.module+el8.3.0+74+855e3f5d)
  • testng (fixed in 0:6.14.3-5.module+el8.3.0+74+855e3f5d)
  • velocity (fixed in 0:1.7-24.module+el8.3.0+74+855e3f5d)
  • weld-parent (fixed in 0:34-5.module+el8.3.0+74+855e3f5d)
  • xalan-j2 (fixed in 0:2.7.1-38.module+el8.3.0+74+855e3f5d)
  • xbean (fixed in 0:4.8-1.module+el8.3.0+74+855e3f5d)
  • xerces-j2 (fixed in 0:2.11.0-34.module+el8.3.0+74+855e3f5d)
  • xml-commons-apis (fixed in 0:1.4.01-25.module+el8.10.0+2003+8aeac9cb)
  • xml-commons-resolver (fixed in 0:1.2-26.module+el8.3.0+74+855e3f5d)
  • xmlunit (fixed in 0:1.6-7.module+el8.3.0+74+855e3f5d)
  • xmvn (fixed in 0:3.0.0-21.module+el8.3.0+74+855e3f5d)
  • xz-java (fixed in 0:1.8-2.module+el8.3.0+74+855e3f5d)

Timeline and source

Published on 20 July 2026. No public exploit is currently recorded for this entry. Record sourced from OSV.

References

errata.rockylinux.org (Advisory)
bugzilla.redhat.com (Report)

Details

Severity Unknown
CVSS Score N/A
CVSS Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
CWE N/A
Public Exploit ✅ No
Source OSV
Published 2026-07-20
Updated 2026-08-12
Modified 2026-07-20
Fix URL N/A

Affected Packages

Software From version Fixed in
ant — 0:1.10.5-1.module+el8.10.0+2003+8aeac9cb
ant-contrib — 0:1.0-0.32.b3.module+el8.3.0+74+855e3f5d
antlr — 0:2.7.7-56.module+el8.3.0+74+855e3f5d
aopalliance — 0:1.0-17.module+el8.3.0+74+855e3f5d
apache-commons-beanutils — 0:1.9.3-5.module+el8.10.0+2003+8aeac9cb
apache-commons-cli — 0:1.4-4.module+el8.10.0+2003+8aeac9cb
apache-commons-codec — 0:1.11-3.module+el8.10.0+2003+8aeac9cb
apache-commons-collections — 0:3.2.2-10.module+el8.3.0+74+855e3f5d
apache-commons-compress — 0:1.18-1.module+el8.3.0+74+855e3f5d
apache-commons-exec — 0:1.3-8.module+el8.3.0+74+855e3f5d
apache-commons-io — 1:2.6-3.module+el8.3.0+74+855e3f5d
apache-commons-jxpath — 0:1.3-29.module+el8.3.0+74+855e3f5d
apache-commons-lang — 0:2.6-21.module+el8.3.0+74+855e3f5d
apache-commons-lang3 — 0:3.7-3.module+el8.10.0+2003+8aeac9cb
apache-commons-logging — 0:1.2-13.module+el8.3.0+74+855e3f5d
apache-commons-net — 0:3.6-3.module+el8.3.0+74+855e3f5d
apache-commons-parent — 0:43-2.module+el8.3.0+74+855e3f5d
apache-ivy — 0:2.4.0-14.module+el8.3.0+74+855e3f5d
apache-parent — 0:19-2.module+el8.3.0+74+855e3f5d
apache-resource-bundles — 0:2-20.module+el8.3.0+74+855e3f5d
aqute-bnd — 0:3.5.0-4.module+el8.3.0+74+855e3f5d
assertj-core — 0:3.8.0-2.module+el8.3.0+74+855e3f5d
atinject — 0:1-28.20100611svn86.module+el8.3.0+74+855e3f5d
bcel — 0:6.2-2.module+el8.3.0+74+855e3f5d
beust-jcommander — 0:1.71-5.module+el8.3.0+74+855e3f5d
bsf — 0:2.4.0-30.module+el8.3.0+74+855e3f5d
bsh — 0:2.0-13.b6.module+el8.3.0+74+855e3f5d
byaccj — 0:1.15-17.module+el8.10.0+2003+8aeac9cb
cal10n — 0:0.8.1-7.module+el8.3.0+74+855e3f5d
cdi-api — 0:1.2-8.module+el8.3.0+74+855e3f5d
cglib — 0:3.2.4-7.module+el8.3.0+74+855e3f5d
easymock — 0:3.5-4.module+el8.3.0+74+855e3f5d
exec-maven-plugin — 0:1.6.0-3.module+el8.3.0+74+855e3f5d
felix-osgi-compendium — 0:1.4.0-26.module+el8.3.0+74+855e3f5d
felix-osgi-core — 0:1.4.0-23.module+el8.3.0+74+855e3f5d
felix-osgi-foundation — 0:1.2.0-23.module+el8.3.0+74+855e3f5d
felix-parent — 0:4-5.module+el8.3.0+74+855e3f5d
felix-utils — 0:1.10.4-2.module+el8.3.0+74+855e3f5d
forge-parent — 0:38-11.module+el8.3.0+74+855e3f5d
fusesource-pom — 0:1.11-3.module+el8.3.0+74+855e3f5d
geronimo-annotation — 0:1.0-23.module+el8.3.0+74+855e3f5d
geronimo-jms — 0:1.1.1-25.module+el8.3.0+74+855e3f5d
geronimo-jpa — 0:1.1.1-21.module+el8.3.0+74+855e3f5d
geronimo-parent-poms — 0:1.6-25.module+el8.3.0+74+855e3f5d
glassfish-annotation-api — 0:1.2-13.module+el8.10.0+2003+8aeac9cb
glassfish-el — 0:3.0.1-0.7.b08.module+el8.10.0+2003+8aeac9cb
glassfish-jsp-api — 0:2.3.2-0.9.b01.module+el8.10.0+2003+8aeac9cb
glassfish-legal — 0:1.1-11.module+el8.3.0+74+855e3f5d
glassfish-master-pom — 0:8-11.module+el8.3.0+74+855e3f5d
glassfish-servlet-api — 0:3.1.0-14.module+el8.3.0+74+855e3f5d
google-guice — 0:4.1-11.module+el8.10.0+2003+8aeac9cb
guava20 — 0:20.0-8.module+el8.3.0+74+855e3f5d
hamcrest — 0:1.3-23.module+el8.3.0+74+855e3f5d
hawtjni — 0:1.16-2.module+el8.3.0+74+855e3f5d
httpcomponents-client — 0:4.5.5-4.module+el8.3.0+74+855e3f5d
httpcomponents-core — 0:4.4.10-4.module+el8.10.0+2003+8aeac9cb
httpcomponents-project — 0:9-2.module+el8.3.0+74+855e3f5d
isorelax — 1:0-0.23.release20050331.module+el8.3.0+74+855e3f5d
jakarta-commons-httpclient — 1:3.1-28.module+el8.3.0+74+855e3f5d
jakarta-oro — 0:2.0.8-23.module+el8.3.0+74+855e3f5d
jansi — 0:1.17.1-1.module+el8.10.0+2003+8aeac9cb
jansi-native — 0:1.7-7.module+el8.3.0+74+855e3f5d
java-cup — 1:0.11b-8.module+el8.3.0+74+855e3f5d
javacc — 0:7.0.2-6.module+el8.3.0+74+855e3f5d
javacc-maven-plugin — 0:2.6-25.module+el8.3.0+74+855e3f5d
javamail — 0:1.5.2-7.module+el8.3.0+74+855e3f5d
javapackages-tools — 0:5.3.0-2.module+el8.3.0+74+855e3f5d
javassist — 0:3.18.1-8.module+el8.3.0+74+855e3f5d
jaxen — 0:1.1.6-18.module+el8.3.0+74+855e3f5d
jboss-interceptors-1.2-api — 0:1.0.0-8.module+el8.3.0+74+855e3f5d
jboss-parent — 0:20-4.module+el8.3.0+74+855e3f5d
jdepend — 0:2.9.1-18.module+el8.3.0+74+855e3f5d
jdependency — 0:1.2-2.module+el8.3.0+74+855e3f5d
jdom — 0:1.1.3-17.module+el8.3.0+74+855e3f5d
jdom2 — 0:2.0.6-12.module+el8.3.0+74+855e3f5d
jflex — 0:1.6.1-12.module+el8.3.0+74+855e3f5d
jline — 0:2.14.6-2.module+el8.3.0+74+855e3f5d
jsch — 0:0.1.54-6.module+el8.3.0+74+855e3f5d
jsoup — 0:1.11.3-3.module+el8.10.0+2003+8aeac9cb
jsr-305 — 0:0-0.22.20130910svn.module+el8.3.0+74+855e3f5d
jtidy — 2:1.0-0.28.20100930svn1125.module+el8.3.0+74+855e3f5d
junit — 1:4.12-9.module+el8.3.0+74+855e3f5d
jvnet-parent — 0:4-10.module+el8.3.0+74+855e3f5d
jzlib — 0:1.1.3-8.module+el8.10.0+2003+8aeac9cb
log4j12 — 0:1.2.17-22.module+el8.3.0+74+855e3f5d
maven — 1:3.5.4-5.module+el8.3.0+74+855e3f5d
maven-antrun-plugin — 0:1.8-6.module+el8.3.0+74+855e3f5d
maven-archiver — 0:3.2.0-2.module+el8.3.0+74+855e3f5d
maven-artifact-resolver — 1:1.0-18.module+el8.3.0+74+855e3f5d
maven-artifact-transfer — 1:0.9.0-4.module+el8.3.0+74+855e3f5d
maven-assembly-plugin — 0:3.1.0-3.module+el8.3.0+74+855e3f5d
maven-clean-plugin — 0:3.0.0-5.module+el8.3.0+74+855e3f5d
maven-common-artifact-filters — 0:3.0.1-4.module+el8.3.0+74+855e3f5d
maven-compiler-plugin — 0:3.7.0-2.module+el8.3.0+74+855e3f5d
maven-dependency-analyzer — 0:1.8-2.module+el8.3.0+74+855e3f5d
maven-dependency-plugin — 0:3.0.2-2.module+el8.3.0+74+855e3f5d
maven-dependency-tree — 0:3.0-5.module+el8.3.0+74+855e3f5d
maven-doxia — 0:1.7-8.module+el8.3.0+74+855e3f5d
maven-doxia-sitetools — 0:1.7.5-2.module+el8.3.0+74+855e3f5d
maven-enforcer — 0:1.4.1-8.module+el8.3.0+74+855e3f5d
maven-file-management — 1:3.0.0-5.module+el8.3.0+74+855e3f5d
maven-filtering — 0:3.1.1-5.module+el8.3.0+74+855e3f5d
maven-install-plugin — 0:2.5.2-7.module+el8.3.0+74+855e3f5d
maven-invoker — 0:2.2-7.module+el8.3.0+74+855e3f5d
maven-invoker-plugin — 0:1.10-7.module+el8.3.0+74+855e3f5d
maven-jar-plugin — 0:3.1.0-1.module+el8.3.0+74+855e3f5d
maven-parent — 0:27-5.module+el8.3.0+74+855e3f5d
maven-plugin-build-helper — 0:1.9.1-8.module+el8.3.0+74+855e3f5d
maven-plugin-bundle — 0:3.5.0-2.module+el8.3.0+74+855e3f5d
maven-plugin-testing — 0:3.3.0-12.module+el8.3.0+74+855e3f5d
maven-plugin-tools — 0:3.5.1-4.module+el8.3.0+74+855e3f5d
maven-plugins-pom — 0:28-7.module+el8.3.0+74+855e3f5d
maven-remote-resources-plugin — 0:1.5-2.module+el8.3.0+74+855e3f5d
maven-reporting-api — 1:3.0-14.module+el8.3.0+74+855e3f5d
maven-reporting-impl — 0:3.0.0-4.module+el8.3.0+74+855e3f5d
maven-resolver — 1:1.1.1-2.module+el8.3.0+74+855e3f5d
maven-resources-plugin — 0:3.1.0-3.module+el8.3.0+74+855e3f5d
maven-script-interpreter — 0:1.1-11.module+el8.3.0+74+855e3f5d
maven-shade-plugin — 0:3.1.0-3.module+el8.3.0+74+855e3f5d
maven-shared — 0:22-6.module+el8.3.0+74+855e3f5d
maven-shared-incremental — 0:1.1-14.module+el8.3.0+74+855e3f5d
maven-shared-io — 1:3.0.0-5.module+el8.3.0+74+855e3f5d
maven-shared-utils — 0:3.2.1-0.1.module+el8.3.0+74+855e3f5d
maven-source-plugin — 0:3.0.1-4.module+el8.3.0+74+855e3f5d
maven-surefire — 0:2.22.0-3.module+el8.3.0+74+855e3f5d
maven-verifier — 0:1.6-6.module+el8.3.0+74+855e3f5d
maven-wagon — 0:3.1.0-1.module+el8.3.0+74+855e3f5d
maven2 — 0:2.2.1-59.module+el8.3.0+74+855e3f5d
mockito — 0:1.10.19-17.module+el8.3.0+74+855e3f5d
modello — 0:1.9.1-7.module+el8.3.0+74+855e3f5d
mojo-parent — 0:40-6.module+el8.3.0+74+855e3f5d
munge-maven-plugin — 0:1.0-11.module+el8.3.0+74+855e3f5d
objectweb-asm — 0:6.2-5.module+el8.3.0+74+855e3f5d
objectweb-pom — 0:1.5-7.module+el8.3.0+74+855e3f5d
objenesis — 0:2.6-2.module+el8.3.0+74+855e3f5d
os-maven-plugin — 0:1.2.3-9.module+el8.3.0+74+855e3f5d
osgi-annotation — 0:6.0.0-7.module+el8.3.0+74+855e3f5d
osgi-compendium — 0:6.0.0-5.module+el8.3.0+74+855e3f5d
osgi-core — 0:6.0.0-6.module+el8.3.0+74+855e3f5d
plexus-ant-factory — 0:1.0-0.20.a2.2.module+el8.3.0+74+855e3f5d
plexus-archiver — 0:3.6.0-1.module+el8.3.0+74+855e3f5d
plexus-bsh-factory — 0:1.0-0.19.a7.module+el8.3.0+74+855e3f5d
plexus-build-api — 0:0.0.7-20.module+el8.3.0+74+855e3f5d
plexus-cipher — 0:1.7-14.module+el8.10.0+2003+8aeac9cb
plexus-classworlds — 0:2.5.2-9.module+el8.10.0+2003+8aeac9cb
plexus-cli — 0:1.6-6.module+el8.3.0+74+855e3f5d
plexus-compiler — 0:2.8.2-2.module+el8.3.0+74+855e3f5d
plexus-component-api — 0:1.0-0.24.alpha15.module+el8.3.0+74+855e3f5d
plexus-component-factories-pom — 0:1.0-0.15.alpha11.module+el8.3.0+74+855e3f5d
plexus-components-pom — 0:1.3.1-10.module+el8.3.0+74+855e3f5d
plexus-containers — 0:1.7.1-8.module+el8.3.0+74+855e3f5d
plexus-i18n — 0:1.0-0.11.b10.4.module+el8.3.0+74+855e3f5d
plexus-interactivity — 0:1.0-0.27.alpha6.module+el8.3.0+74+855e3f5d
plexus-interpolation — 0:1.22-9.module+el8.10.0+2003+8aeac9cb
plexus-io — 0:3.0.0-2.module+el8.3.0+74+855e3f5d
plexus-languages — 0:0.9.10-3.module+el8.3.0+74+855e3f5d
plexus-pom — 0:5.0-2.module+el8.3.0+74+855e3f5d
plexus-resources — 0:1.0-0.23.a7.module+el8.3.0+74+855e3f5d
plexus-sec-dispatcher — 0:1.4-26.module+el8.10.0+2003+8aeac9cb
plexus-utils — 0:3.1.0-3.module+el8.3.0+74+855e3f5d
plexus-velocity — 0:1.2-4.module+el8.3.0+74+855e3f5d
powermock — 0:1.6.5-9.module+el8.3.0+74+855e3f5d
qdox — 0:2.0-3.M9.module+el8.3.0+74+855e3f5d
regexp — 1:1.5-26.module+el8.3.0+74+855e3f5d
sisu — 1:0.3.3-7.module+el8.10.0+2003+8aeac9cb
sisu-mojos — 0:0.3.1-8.module+el8.3.0+74+855e3f5d
slf4j — 0:1.7.25-4.module+el8.3.0+74+855e3f5d
sonatype-oss-parent — 0:7-14.module+el8.3.0+74+855e3f5d
sonatype-plugins-parent — 0:8-12.module+el8.3.0+74+855e3f5d
spec-version-maven-plugin — 0:1.2-11.module+el8.3.0+74+855e3f5d
spice-parent — 0:26-8.module+el8.3.0+74+855e3f5d
testng — 0:6.14.3-5.module+el8.3.0+74+855e3f5d
velocity — 0:1.7-24.module+el8.3.0+74+855e3f5d
weld-parent — 0:34-5.module+el8.3.0+74+855e3f5d
xalan-j2 — 0:2.7.1-38.module+el8.3.0+74+855e3f5d
xbean — 0:4.8-1.module+el8.3.0+74+855e3f5d
xerces-j2 — 0:2.11.0-34.module+el8.3.0+74+855e3f5d
xml-commons-apis — 0:1.4.01-25.module+el8.10.0+2003+8aeac9cb
xml-commons-resolver — 0:1.2-26.module+el8.3.0+74+855e3f5d
xmlunit — 0:1.6-7.module+el8.3.0+74+855e3f5d
xmvn — 0:3.0.0-21.module+el8.3.0+74+855e3f5d
xz-java — 0:1.8-2.module+el8.3.0+74+855e3f5d

Similar Threats

Free Vulnerability Check

Is your site affected by RLSA-2026:41948?

BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against RLSA-2026:41948 and other known CVE records.

Scan My Site Free →

No credit card required  ·  Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.