VYPR

Maven package

org.apache.maven.shared/maven-shared-utils

pkg:maven/org.apache.maven.shared/maven-shared-utils

Vulnerabilities (1)

  • CVE-2022-29599May 23, 2022
    affected < 3.3.3fixed 3.3.3

    In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.