p PatchFirst

PatchFirst · Latest vulnerabilities

apache-commons-jxpath vulnerabilities

Vulnerabilities published for apache-commons-jxpath in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 2

  1. RLSA-2026:41948

    High · CVSS 8.3Fix available

    Important: javapackages-tools:201801 security update

    The javapackages-tools packages provide macros and scripts to support Java packaging. Security Fix(es): * org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    apache-commons-jxpath apache-commons-jxpathOperating systems
    • Update to 0:1.3-29.module+el8.10.0+2003+8aeac9cb
    • Update to 0:1.3-29.module+el8.3.0+74+855e3f5d
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. RLSA-2025:9318

    High · CVSS 8.8Fix available

    Important: javapackages-tools:201801 security update

    The javapackages-tools packages provide macros and scripts to support Java packaging. Security Fix(es): * apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default (CVE-2019-10086) * commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default (CVE-2025-48734) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    apache-commons-jxpath apache-commons-jxpathOperating systems
    • Update to 0:1.3-29.module+el8.10.0+2003+8aeac9cb
    • Update to 0:1.3-29.module+el8.3.0+74+855e3f5d
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →