[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-67030":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T00:21:03.480Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":40,"aliases":41,"duplicate_of":9,"upstream":43,"downstream":44,"duplicates":81,"related":82,"reserved_at":9,"published_at":89,"modified_at":90,"state":91,"summary":92,"references_raw":101,"kevs":226,"epss":227,"epss_history":230,"metrics":503,"affected":511},"CVE-2025-67030","Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-22","Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.","weakness","Stable","Base","High",[20,24,28,32,36],{"id":21,"name":22,"techniques":23},"CAPEC-126","Path Traversal",[],{"id":25,"name":26,"techniques":27},"CAPEC-64","Using Slashes and URL Encoding Combined to Bypass Validation Logic",[],{"id":29,"name":30,"techniques":31},"CAPEC-76","Manipulating Web Input to File System Calls",[],{"id":33,"name":34,"techniques":35},"CAPEC-78","Using Escaped Slashes in Alternate Encoding",[],{"id":37,"name":38,"techniques":39},"CAPEC-79","Using Slashes in Alternate Encoding",[],[],[42],"GHSA-6fmv-xxpf-w3cw",[],[45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79],{"_key":46},"OPENSUSE-SU-2026:10439-1",{"_key":48},"SUSE-SU-2026:1396-1",{"_key":50},"SUSE-SU-2026:21194-1",{"_key":52},"OPENSUSE-SU-2026:20535-1",{"_key":54},"DEBIAN-CVE-2025-67030",{"_key":56},"UBUNTU-CVE-2025-67030",{"_key":58},"RHSA-2026:18054",{"_key":60},"RHSA-2026:18055",{"_key":62},"RHSA-2026:35990",{"_key":64},"RHSA-2026:35991",{"_key":66},"RHSA-2026:35992",{"_key":68},"RHSA-2026:35996",{"_key":70},"RHSA-2026:35997",{"_key":72},"RHSA-2026:36012",{"_key":74},"RHSA-2026:38500",{"_key":76},"RHSA-2026:38514",{"_key":78},"RHSA-2026:38796",{"_key":80},"RHSA-2026:40841",[],[83,84,85,86,87],{"_key":46},{"_key":48},{"_key":50},{"_key":52},{"_key":88},"CGA-7H4Q-9657-Q3XX","2026-03-25T00:00:00.000Z","2026-07-21T12:05:03.018Z","Analyzed",{"cisa_kev":93,"cisa_ransomware":93,"cisa_vendor":9,"epss_severity":94,"epss_score":95,"severity":96,"severity_score":97,"severity_version":98,"severity_source":99,"severity_vector":100,"severity_status":91},false,"low",0.00663,"high",8.8,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",[102,111,115,119,123,128,133,138,142,148,152,157,162,166,170,174,178,182,186,190,194,198,202,206,210,214,218,222],{"url":103,"sources":104,"tags":107},"https://github.com/codehaus-plexus/plexus-utils/pull/295",[99,105,106],"nvd","osv_maven",[108,109,110],"WEB","Issue Tracking","Patch",{"url":112,"sources":113,"tags":114},"https://github.com/codehaus-plexus/plexus-utils/issues/294",[99,105,106],[108,109],{"url":116,"sources":117,"tags":118},"https://github.com/codehaus-plexus/plexus-utils/commit/6d780b3378829318ba5c2d29547e0012d5b29642",[99,105,106],[108,110],{"url":120,"sources":121,"tags":122},"https://github.com/codehaus-plexus/plexus-utils/pull/296",[99,105,106],[108,109,110],{"url":124,"sources":125,"tags":126},"https://gist.github.com/weaver4VD/3216dac645220f8c9b488362f61241ec",[99,105,106],[108,127],"Third Party Advisory",{"url":129,"sources":130,"tags":131},"https://nvd.nist.gov/vuln/detail/CVE-2025-67030",[106],[132],"Advisory",{"url":134,"sources":135,"tags":136},"https://github.com/codehaus-plexus/plexus-utils",[106],[137],"PACKAGE",{"url":139,"sources":140,"tags":141},"https://github.com/codehaus-plexus/plexus-utils/releases/tag/plexus-utils-4.0.3",[106],[108],{"url":143,"sources":144,"tags":145},"https://access.redhat.com/security/cve/CVE-2025-67030",[99],[146,147],"VDB Entry","X Refsource REDHAT",{"url":149,"sources":150,"tags":151},"https://bugzilla.redhat.com/show_bug.cgi?id=2451409",[99],[109,147],{"url":153,"sources":154,"tags":155},"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-67030.json",[99],[156],"X Sadp Csaf Vex",{"url":158,"sources":159,"tags":160},"https://access.redhat.com/errata/RHSA-2026:18054",[99],[161,147],"Vendor Advisory",{"url":163,"sources":164,"tags":165},"https://access.redhat.com/errata/RHSA-2026:18055",[99],[161,147],{"url":167,"sources":168,"tags":169},"https://access.redhat.com/errata/RHSA-2026:18059",[99],[161,147],{"url":171,"sources":172,"tags":173},"https://access.redhat.com/errata/RHSA-2026:17668",[99],[161,147],{"url":175,"sources":176,"tags":177},"https://access.redhat.com/errata/RHSA-2026:7109",[99],[161,147],{"url":179,"sources":180,"tags":181},"https://access.redhat.com/errata/RHSA-2026:7380",[99],[161,147],{"url":183,"sources":184,"tags":185},"https://access.redhat.com/errata/RHSA-2026:35991",[99],[161,147],{"url":187,"sources":188,"tags":189},"https://access.redhat.com/errata/RHSA-2026:35996",[99],[161,147],{"url":191,"sources":192,"tags":193},"https://access.redhat.com/errata/RHSA-2026:35990",[99],[161,147],{"url":195,"sources":196,"tags":197},"https://access.redhat.com/errata/RHSA-2026:35992",[99],[161,147],{"url":199,"sources":200,"tags":201},"https://access.redhat.com/errata/RHSA-2026:36012",[99],[161,147],{"url":203,"sources":204,"tags":205},"https://access.redhat.com/errata/RHSA-2026:35997",[99],[161,147],{"url":207,"sources":208,"tags":209},"https://access.redhat.com/errata/RHSA-2026:38514",[99],[161,147],{"url":211,"sources":212,"tags":213},"https://access.redhat.com/errata/RHSA-2026:38796",[99],[161,147],{"url":215,"sources":216,"tags":217},"https://access.redhat.com/errata/RHSA-2026:38500",[99],[161,147],{"url":219,"sources":220,"tags":221},"https://access.redhat.com/errata/RHSA-2026:40841",[99],[161,147],{"url":223,"sources":224,"tags":225},"https://access.redhat.com/errata/RHSA-2026:41948",[99],[161,147],[],{"date":228,"score":95,"percentile":229},"2026-07-05",0.47225,[231,235,238,242,245,248,252,255,259,261,264,267,270,273,276,279,282,284,286,289,292,295,298,301,304,307,310,313,316,318,321,324,328,331,334,337,340,343,346,349,352,355,359,362,365,368,371,374,377,380,383,387,390,393,396,399,401,404,407,410,412,415,418,421,424,427,430,433,437,440,443,446,449,452,454,457,460,463,466,469,472,475,479,482,485,488,491,494,497,500],{"date":232,"score":233,"percentile":234},"2026-03-26",0.00043,0.13341,{"date":236,"score":233,"percentile":237},"2026-03-27",0.13382,{"date":239,"score":240,"percentile":241},"2026-03-28",0.00132,0.32822,{"date":243,"score":240,"percentile":244},"2026-03-29",0.32788,{"date":246,"score":240,"percentile":247},"2026-03-30",0.32768,{"date":249,"score":250,"percentile":251},"2026-03-31",0.00143,0.34481,{"date":253,"score":250,"percentile":254},"2026-04-01",0.34503,{"date":256,"score":257,"percentile":258},"2026-04-02",0.00247,0.47944,{"date":260,"score":257,"percentile":258},"2026-04-03",{"date":262,"score":257,"percentile":263},"2026-04-04",0.47965,{"date":265,"score":257,"percentile":266},"2026-04-05",0.47941,{"date":268,"score":257,"percentile":269},"2026-04-06",0.47904,{"date":271,"score":257,"percentile":272},"2026-04-07",0.47913,{"date":274,"score":257,"percentile":275},"2026-04-08",0.47966,{"date":277,"score":257,"percentile":278},"2026-04-09",0.47961,{"date":280,"score":257,"percentile":281},"2026-04-10",0.47984,{"date":283,"score":257,"percentile":281},"2026-04-11",{"date":285,"score":257,"percentile":278},"2026-04-12",{"date":287,"score":257,"percentile":288},"2026-04-13",0.47973,{"date":290,"score":257,"percentile":291},"2026-04-14",0.4797,{"date":293,"score":257,"percentile":294},"2026-04-15",0.48015,{"date":296,"score":257,"percentile":297},"2026-04-16",0.48025,{"date":299,"score":257,"percentile":300},"2026-04-17",0.48018,{"date":302,"score":257,"percentile":303},"2026-04-18",0.48021,{"date":305,"score":257,"percentile":306},"2026-04-19",0.48004,{"date":308,"score":257,"percentile":309},"2026-04-20",0.47997,{"date":311,"score":257,"percentile":312},"2026-04-21",0.47976,{"date":314,"score":257,"percentile":315},"2026-04-22",0.48003,{"date":317,"score":257,"percentile":297},"2026-04-23",{"date":319,"score":257,"percentile":320},"2026-04-24",0.47958,{"date":322,"score":257,"percentile":323},"2026-04-25",0.4798,{"date":325,"score":326,"percentile":327},"2026-04-26",0.00269,0.50394,{"date":329,"score":326,"percentile":330},"2026-04-27",0.50378,{"date":332,"score":326,"percentile":333},"2026-04-28",0.50351,{"date":335,"score":326,"percentile":336},"2026-04-29",0.50345,{"date":338,"score":326,"percentile":339},"2026-04-30",0.50335,{"date":341,"score":326,"percentile":342},"2026-05-01",0.50332,{"date":344,"score":326,"percentile":345},"2026-05-02",0.50363,{"date":347,"score":326,"percentile":348},"2026-05-03",0.50323,{"date":350,"score":326,"percentile":351},"2026-05-04",0.50282,{"date":353,"score":326,"percentile":354},"2026-05-05",0.50268,{"date":356,"score":357,"percentile":358},"2026-05-06",0.00273,0.5063,{"date":360,"score":357,"percentile":361},"2026-05-07",0.50672,{"date":363,"score":357,"percentile":364},"2026-05-08",0.50675,{"date":366,"score":357,"percentile":367},"2026-05-09",0.50703,{"date":369,"score":357,"percentile":370},"2026-05-10",0.5067,{"date":372,"score":357,"percentile":373},"2026-05-11",0.50657,{"date":375,"score":357,"percentile":376},"2026-05-12",0.50688,{"date":378,"score":357,"percentile":379},"2026-05-13",0.50736,{"date":381,"score":357,"percentile":382},"2026-05-14",0.50766,{"date":384,"score":385,"percentile":386},"2026-05-15",0.0037,0.58986,{"date":388,"score":385,"percentile":389},"2026-05-16",0.59001,{"date":391,"score":385,"percentile":392},"2026-05-17",0.59009,{"date":394,"score":385,"percentile":395},"2026-05-18",0.5898,{"date":397,"score":385,"percentile":398},"2026-05-19",0.58987,{"date":400,"score":385,"percentile":386},"2026-05-20",{"date":402,"score":385,"percentile":403},"2026-05-21",0.58989,{"date":405,"score":385,"percentile":406},"2026-05-22",0.59002,{"date":408,"score":385,"percentile":409},"2026-05-23",0.59004,{"date":411,"score":385,"percentile":398},"2026-05-24",{"date":413,"score":385,"percentile":414},"2026-05-25",0.58968,{"date":416,"score":385,"percentile":417},"2026-05-26",0.58946,{"date":419,"score":385,"percentile":420},"2026-05-27",0.59005,{"date":422,"score":385,"percentile":423},"2026-05-28",0.5908,{"date":425,"score":385,"percentile":426},"2026-05-29",0.59117,{"date":428,"score":385,"percentile":429},"2026-05-30",0.59132,{"date":431,"score":385,"percentile":432},"2026-05-31",0.59112,{"date":434,"score":435,"percentile":436},"2026-06-01",0.00427,0.62638,{"date":438,"score":435,"percentile":439},"2026-06-02",0.62661,{"date":441,"score":435,"percentile":442},"2026-06-03",0.62689,{"date":444,"score":435,"percentile":445},"2026-06-04",0.62706,{"date":447,"score":435,"percentile":448},"2026-06-05",0.62751,{"date":450,"score":435,"percentile":451},"2026-06-06",0.6276,{"date":453,"score":435,"percentile":448},"2026-06-07",{"date":455,"score":435,"percentile":456},"2026-06-08",0.62736,{"date":458,"score":435,"percentile":459},"2026-06-09",0.62749,{"date":461,"score":435,"percentile":462},"2026-06-10",0.62797,{"date":464,"score":435,"percentile":465},"2026-06-11",0.62815,{"date":467,"score":435,"percentile":468},"2026-06-12",0.62917,{"date":470,"score":435,"percentile":471},"2026-06-13",0.62929,{"date":473,"score":435,"percentile":474},"2026-06-14",0.62924,{"date":476,"score":477,"percentile":478},"2026-06-15",0.00664,0.46695,{"date":480,"score":477,"percentile":481},"2026-06-16",0.46742,{"date":483,"score":477,"percentile":484},"2026-06-17",0.46815,{"date":486,"score":477,"percentile":487},"2026-06-18",0.46858,{"date":489,"score":477,"percentile":490},"2026-06-19",0.46852,{"date":492,"score":477,"percentile":493},"2026-06-20",0.46847,{"date":495,"score":477,"percentile":496},"2026-06-21",0.46828,{"date":498,"score":477,"percentile":499},"2026-06-22",0.46823,{"date":501,"score":477,"percentile":502},"2026-06-23",0.46888,[504,509],{"source":99,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":505,"cvss_v4_0":9},{"baseScore":97,"baseSeverity":506,"vectorString":100,"impactScore":507,"exploitabilityScore":508},"HIGH",9.8,7.2,{"source":105,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":510,"cvss_v4_0":9},{"baseScore":97,"baseSeverity":506,"vectorString":100,"impactScore":507,"exploitabilityScore":508},[512,530],{"ecosystem":9,"name":513,"vendor":514,"product":513,"cpe_part":515,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":516},"plexus-utils","codehaus-plexus","a",[517,523,526],{"version":518,"is_range":519,"range_type":520,"version_start":9,"version_start_type":9,"version_end":521,"version_end_type":522,"fixed_in":9},"lt4.0.3",true,"cpe","4.0.3","excluding",{"version":524,"is_range":519,"range_type":520,"version_start":9,"version_start_type":9,"version_end":525,"version_end_type":522,"fixed_in":9},"lt3.6.1","3.6.1",{"version":527,"is_range":519,"range_type":520,"version_start":528,"version_start_type":529,"version_end":521,"version_end_type":522,"fixed_in":9},"gte4.0.0_lt4.0.3","4.0.0","including",{"ecosystem":531,"name":532,"vendor":533,"product":513,"cpe_part":9,"purl_type":534,"purl_namespace":533,"purl_name":513,"source":9,"versions":535},"Maven","org.codehaus.plexus:plexus-utils","org.codehaus.plexus","maven",[536,539,541],{"version":537,"is_range":519,"range_type":538,"version_start":9,"version_start_type":9,"version_end":521,"version_end_type":522,"fixed_in":9},"lt4_0_3","ecosystem",{"version":540,"is_range":519,"range_type":538,"version_start":528,"version_start_type":529,"version_end":521,"version_end_type":522,"fixed_in":9},"gte4_0_0_lt4_0_3",{"version":542,"is_range":519,"range_type":538,"version_start":9,"version_start_type":9,"version_end":525,"version_end_type":522,"fixed_in":9},"lt3_6_1"]