https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:50:12.055066+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:4797 ALSA-2022:4797 — Important: maven:3.6 security update 2026-10-02T15:50:12.090159+00:00

Affected: AlmaLinux:8: aopalliance, AlmaLinux:8: apache-commons-cli, AlmaLinux:8: apache-commons-codec, AlmaLinux:8: apache-commons-io, AlmaLinux:8: apache-commons-lang3, AlmaLinux:8: atinject, AlmaLinux:8: cdi-api, AlmaLinux:8: geronimo-annotation, AlmaLinux:8: google-guice, AlmaLinux:8: guava and 22 more

The Apache Maven Shared Utils project aims to be an improved functional replacement for plexus-utils in Maven.

Security Fix(es):

* maven-shared-utils: Command injection via Commandline class (CVE-2022-29599)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-03775 bdu:2024-03775 2026-10-02T15:50:12.090317+00:00 bdu:2024-03775 https://cve.radiocsirt.org/vuln/bell-cve-2022-29599 Withdrawn: BELL-CVE-2022-29599 — CVE-2022-29599 does not affect BellSoft software 2026-10-02T15:50:12.090345+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2023-avi-0861 certfr-2023-avi-0861 — De multiples vulnérabilités ont été découvertes dans Oracle WebLogic. Certaines d'entre elles permettent à un attaquant… 2026-10-02T15:50:12.090370+00:00 certfr-2023-avi-0861 https://cve.radiocsirt.org/vuln/cnvd-2022-53585 cnvd-2022-53585 2026-10-02T15:50:12.090393+00:00 cnvd-2022-53585 https://cve.radiocsirt.org/vuln/euvd-2026-16151 EUVD-2026-16151 2026-10-02T15:50:12.090413+00:00 EUVD-2026-16151 https://cve.radiocsirt.org/vuln/fkie_cve-2022-29599 fkie_cve-2022-29599 2026-10-02T15:50:12.090431+00:00

In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.

 https://cve.radiocsirt.org/vuln/ghsa-rhgr-952r-6p8q GHSA-rhgr-952r-6p8q — Command injection in Apache Maven maven-shared-utils 2026-10-02T15:50:12.090464+00:00

Affected: Maven: org.apache.maven.shared:maven-shared-utils

In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.

 https://cve.radiocsirt.org/vuln/gsd-2022-29599 gsd-2022-29599 2026-10-02T15:50:12.090497+00:00 gsd-2022-29599 https://cve.radiocsirt.org/vuln/oesa-2022-1684 OESA-2022-1684 — maven-shared-utils security update 2026-10-02T15:50:12.090515+00:00

Affected: openEuler:20.03-LTS-SP1: maven-shared-utils, openEuler:20.03-LTS-SP3: maven-shared-utils, openEuler:22.03-LTS: maven-shared-utils

This package can be the functional replacement of plexus-utils in Maven. At the same time, the package has many hightlights, such as: a lot of methods got cleaned up, generics got added and a lot of unused code dropped.

Security Fix(es):

In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.(CVE-2022-29599)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12027-1 openSUSE-SU-2024:12027-1 — maven-shared-utils-3.3.3-1.1 on GA media 2026-10-02T15:50:12.090558+00:00

maven-shared-utils-3.3.3-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2022:1541 RHSA-2022:1541 — Red Hat Security Advisory: maven-shared-utils security update 2026-10-02T15:50:12.090585+00:00

maven-shared-utils: Command injection via Commandline class

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-29599 UBUNTU-CVE-2022-29599 2026-10-02T15:50:12.090613+00:00

Affected: Ubuntu:Pro:14.04:LTS: maven-shared-utils, Ubuntu:Pro:16.04:LTS: maven-shared-utils, Ubuntu:Pro:18.04:LTS: maven-shared-utils, Ubuntu:20.04:LTS: maven-shared-utils, Ubuntu:22.04:LTS: maven-shared-utils

In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0007 WID-SEC-W-2022-0007 — Red Hat Enterprise Linux: Schwachstelle ermöglicht Codeausführung 2026-10-02T15:50:12.090663+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen.