CVE-2025-67030
HighAdvisory
Published 25 Mar 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.3
- base score, highest
- EPSS
- 0.007
- 50th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 196
- of 17,781 indexed, latest versions
- Container images
- 208
- deployed by those charts
- Fix available
- 28 of 28
- affected packages
Red Hat Security Advisory: maven:3.8 security update
Carried by container images the latest versions of 196 of 17,781 indexed charts deploy, on 208 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| javapackages-toolsrpm | 5.3.0-1.module+el8+2447+6f56d9a6, 5.3.0-2.module+el8.3.0+125+5da1ae29 | 0:5.3.0-2.module+el8.10.0+2003+8aeac9cb, 0:5.3.0-2.module+el8.10.0+23274+27840b45 | 68 |
| plexus-utilsrpm | 3.3.0-3.module+el8.3.0+6804+157bd82e, 3.3.0-3.module+el8.6.0+13337+afcb49ec, 3.3.0-10.module+el8.8.0+18044+0a924b8f, 3.3.0-10.module+el9.2.0+18047+4ad4bba4+2 more | 0:3.3.0-10.module+el8.8.0+24386+48baf958.1, 0:3.3.0-11.module+el8.10.0+24366+080b405b.1, 0:3.5.1-17.module+el9.8.0+24375+95248a69.1 | 45 |
| apache-commons-clirpm | 1.4-7.module+el8.3.0+6804+157bd82e, 1.4-7.module+el8.6.0+13337+afcb49ec, 1.5.0-4.module+el8.8.0+18044+0a924b8f, 1.5.0-4.module+el9.2.0+18047+4ad4bba4+1 more | 0:1.5.0-5.module+el8.10.0+21301+657f54a3, 0:1.9.0-4.module+el9.8.0+24092+eb9f67d0 | 23 |
| apache-commons-codecrpm | 1.13-3.module+el8.3.0+6804+157bd82e, 1.13-3.module+el8.6.0+13337+afcb49ec, 1.15-7.module+el8.8.0+18044+0a924b8f, 1.15-7.module+el9.2.0+18047+4ad4bba4+1 more | 0:1.15-8.module+el8.10.0+21301+657f54a3, 0:1.17.1-8.module+el9.8.0+24092+eb9f67d0 | 23 |
| apache-commons-iorpm | 1:2.6-6.module+el8.3.0+6804+157bd82e, 1:2.6-6.module+el8.6.0+13337+afcb49ec, 1:2.11.0-2.module+el8.8.0+18044+0a924b8f, 1:2.11.0-2.module+el9.2.0+18047+4ad4bba4+1 more | 1:2.11.0-3.module+el8.10.0+21301+657f54a3, 1:2.16.1-9.module+el9.8.0+24092+eb9f67d0 | 23 |
| atinjectrpm | 1-31.20100611svn86.module+el8.3.0+6804+157bd82e, 1-31.20100611svn86.module+el8.6.0+13337+afcb49ec, 1.0.5-4.module+el8.8.0+18044+0a924b8f, 1.0.5-4.module+el9.2.0+18047+4ad4bba4+1 more | 0:1.0.5-5.module+el8.10.0+21301+657f54a3, 0:1.0.5-14.module+el9.8.0+24092+eb9f67d0 | 23 |
| google-guicerpm | 4.2.2-4.module+el8.3.0+6804+157bd82e, 4.2.2-4.module+el8.6.0+13337+afcb49ec, 4.2.3-9.module+el8.8.0+18044+0a924b8f, 4.2.3-9.module+el9.2.0+18047+4ad4bba4+1 more | 0:4.2.3-10.module+el8.10.0+21301+657f54a3, 0:5.1.0-23.module+el9.8.0+24092+eb9f67d0 | 23 |
| guavarpm | 28.1-3.module+el8.3.0+6804+157bd82e, 28.1-3.module+el8.6.0+13337+afcb49ec, 31.0.1-4.module+el8.8.0+18044+0a924b8f, 31.0.1-4.module+el9.2.0+18047+4ad4bba4+1 more | 0:31.0.1-5.module+el8.10.0+21301+657f54a3, 0:33.3.0-5.module+el9.8.0+24092+eb9f67d0 | 23 |
| httpcomponents-clientrpm | 4.5.10-3.module+el8.3.0+6804+157bd82e, 4.5.10-4.module+el8.6.0+13337+afcb49ec, 4.5.13-5.module+el8.8.0+18044+0a924b8f, 4.5.13-5.module+el9.2.0+18047+4ad4bba4+1 more | 0:4.5.13-6.module+el8.10.0+21301+657f54a3, 0:4.5.14-21.module+el9.8.0+24092+eb9f67d0 | 23 |
| httpcomponents-corerpm | 4.4.12-3.module+el8.3.0+6804+157bd82e, 4.4.12-3.module+el8.6.0+13337+afcb49ec, 4.4.13-7.module+el8.8.0+18044+0a924b8f, 4.4.13-7.module+el9.2.0+18047+4ad4bba4+1 more | 0:4.4.13-8.module+el8.10.0+21301+657f54a3, 0:4.4.16-21.module+el9.8.0+24092+eb9f67d0 | 23 |
| jansirpm | 1.18-4.module+el8.3.0+6804+157bd82e, 1.18-4.module+el8.6.0+13337+afcb49ec, 2.4.0-6.module+el8.8.0+18044+0a924b8f, 2.4.0-6.module+el9.2.0+18047+4ad4bba4+1 more | 0:2.4.0-7.module+el8.10.0+21301+657f54a3, 0:2.4.1-12.module+el9.8.0+24092+eb9f67d0 | 23 |
| jsr-305rpm | 0-0.25.20130910svn.module+el8.3.0+6804+157bd82e, 0-0.25.20130910svn.module+el8.6.0+13337+afcb49ec, 3.0.2-6.module+el8.8.0+18044+0a924b8f, 3.0.2-6.module+el9.2.0+18047+4ad4bba4+1 more | 0:3.0.2-7.module+el8.10.0+21301+657f54a3, 0:3.0.2-36.module+el9.8.0+24092+eb9f67d0 | 23 |
| mavenrpm | 1:3.6.2-6.module+el8.4.0+9250+1786af37, 1:3.6.2-7.module+el8.6.0+13337+afcb49ec, 1:3.8.5-4.module+el8.8.0+18044+0a924b8f, 1:3.8.5-4.module+el9.2.0+18047+4ad4bba4+1 more | 1:3.8.5-6.module+el8.10.0+21301+657f54a3, 1:3.9.9-13.module+el9.8.0+24092+eb9f67d0 | 23 |
| maven-resolverrpm | 1:1.7.3-5.module+el8.8.0+18044+0a924b8f, 1:1.7.3-5.module+el9.2.0+18047+4ad4bba4, 1:1.9.22-6.module+el9.6.0+22733+e520f63c, 1.4.1-3.module+el8.3.0+6804+157bd82e+1 more | 1:1.7.3-6.module+el8.10.0+21301+657f54a3, 1:1.9.22-6.module+el9.8.0+24092+eb9f67d0 | 23 |
| maven-shared-utilsrpm | 3.2.1-0.4.module+el8.3.0+6804+157bd82e, 3.2.1-0.4.module+el8.6.0+13337+afcb49ec, 3.2.1-0.5.module+el8.6.0+15049+43453910, 3.3.4-5.module+el8.8.0+18044+0a924b8f+2 more | 0:3.3.4-6.module+el8.10.0+21301+657f54a3, 0:3.4.2-19.module+el9.8.0+24092+eb9f67d0 | 23 |
| maven-wagonrpm | 3.3.4-2.module+el8.3.0+6804+157bd82e, 3.3.4-2.module+el8.6.0+13337+afcb49ec, 3.5.1-2.module+el8.8.0+18044+0a924b8f, 3.5.1-2.module+el9.2.0+18047+4ad4bba4+1 more | 0:3.5.1-3.module+el8.10.0+21301+657f54a3, 0:3.5.3-17.module+el9.8.0+24092+eb9f67d0 | 23 |
| plexus-cipherrpm | 1.7-17.module+el8.3.0+6804+157bd82e, 1.7-17.module+el8.6.0+13337+afcb49ec, 2.0-2.module+el8.8.0+18044+0a924b8f, 2.0-2.module+el9.2.0+18047+4ad4bba4+1 more | 0:2.0-3.module+el8.10.0+21301+657f54a3, 0:2.0-25.module+el9.8.0+24092+eb9f67d0 | 23 |
| plexus-classworldsrpm | 2.6.0-4.module+el8.3.0+6804+157bd82e, 2.6.0-4.module+el8.6.0+13337+afcb49ec, 2.6.0-12.module+el8.8.0+18044+0a924b8f, 2.6.0-12.module+el9.2.0+18047+4ad4bba4+1 more | 0:2.6.0-13.module+el8.10.0+21301+657f54a3, 0:2.8.0-9.module+el9.8.0+24092+eb9f67d0 | 23 |
| plexus-containersrpm | 2.1.0-2.module+el8.3.0+6804+157bd82e, 2.1.0-2.module+el8.6.0+13337+afcb49ec, 2.1.1-2.module+el8.8.0+18044+0a924b8f, 2.1.1-2.module+el9.2.0+18047+4ad4bba4+1 more | 0:2.1.1-3.module+el8.10.0+21301+657f54a3, 0:2.2.0-10.module+el9.8.0+24092+eb9f67d0 | 23 |
| plexus-interpolationrpm | 1.26-3.module+el8.3.0+6804+157bd82e, 1.26-3.module+el8.6.0+13337+afcb49ec, 1.26-12.module+el8.8.0+18044+0a924b8f, 1.26-12.module+el9.2.0+18047+4ad4bba4+1 more | 0:1.26-13.module+el8.10.0+21301+657f54a3, 0:1.27-10.module+el9.8.0+24092+eb9f67d0 | 23 |
| plexus-sec-dispatcherrpm | 1.4-29.module+el8.3.0+6804+157bd82e, 1.4-29.module+el8.6.0+13337+afcb49ec, 2.0-4.module+el8.8.0+18044+0a924b8f, 2.0-4.module+el9.2.0+18047+4ad4bba4+1 more | 0:2.0-5.module+el8.10.0+21301+657f54a3, 0:2.0-28.module+el9.8.0+24092+eb9f67d0 | 23 |
| sisurpm | 0.3.4-2.module+el8.3.0+6804+157bd82e, 0.3.4-2.module+el8.6.0+13337+afcb49ec, 1:0.3.5-2.module+el8.8.0+18044+0a924b8f, 1:0.3.5-2.module+el9.2.0+18047+4ad4bba4+1 more | 1:0.3.5-3.module+el8.10.0+21301+657f54a3, 1:0.9.0~M3-7.module+el9.8.0+24092+eb9f67d0 | 23 |
| slf4jrpm | 1.7.28-3.module+el8.3.0+6804+157bd82e, 1.7.28-3.module+el8.6.0+13337+afcb49ec, 1.7.32-4.module+el8.8.0+18044+0a924b8f, 1.7.32-4.module+el9.2.0+18047+4ad4bba4+1 more | 0:1.7.32-5.module+el8.10.0+21301+657f54a3, 0:1.7.36-9.module+el9.8.0+24092+eb9f67d0 | 23 |
| apache-commons-lang3rpm | 3.9-4.module+el8.3.0+6804+157bd82e, 3.9-4.module+el8.6.0+13337+afcb49ec, 3.12.0-7.module+el8.8.0+18044+0a924b8f | 0:3.12.0-8.module+el8.10.0+21301+657f54a3 | 16 |
| cdi-apirpm | 2.0.1-3.module+el8.3.0+6804+157bd82e, 2.0.1-3.module+el8.6.0+13337+afcb49ec, 2.0.2-6.module+el8.8.0+18044+0a924b8f | 0:2.0.2-7.module+el8.10.0+21301+657f54a3 | 16 |
| jakarta-annotationsrpm | 1.3.5-14.module+el8.8.0+18044+0a924b8f, 1.3.5-14.module+el9.2.0+18047+4ad4bba4, 1.3.5-38.module+el9.6.0+22733+e520f63c | 0:1.3.5-15.module+el8.10.0+21301+657f54a3, 0:1.3.5-38.module+el9.8.0+24092+eb9f67d0 | 11 |
| aopalliancerpm | 0:1.0-51.module+el9.6.0+22733+e520f63c | 0:1.0-51.module+el9.8.0+24092+eb9f67d0 | 4 |
| plexus-utilsmaven | 1.5.6, 1.5.8, 1.5.15, 2.0.4+19 more | 3.6.1, 4.0.3 | 188 |
- OSV records
- GHSA-6fmv-xxpf-w3cwRHSA-2026:35996RHSA-2026:38500RHSA-2026:40841RHSA-2026:41948RLSA-2026:41948
- Also known as
- RHSA-2026:38796
Charts affected
196 by stars
Container images carrying it
208 by charts deploying them
A fixed version is listed for 28 of the 28 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| fthomas/ | 367afe974b7a | plexus-utils | 4.0.3 | 1 |
| geoservercloud/ | 5dc0c93a1710 | plexus-utils | 3.6.1 | 1 |
| geoservercloud/ | 28c3e5a8c5a3 | plexus-utils | 3.6.1 | 1 |
| glarad/ | 7b02b9e7f1ef | plexus-utils | 3.6.1 | 1 |
| gridgain/ | d32d182a0e6a | plexus-utils | 3.6.1 | 1 |
| gurolakman/ | ed8fd2062548 | javapackages-tools | 0:5.3.0-2.module+el8.10.0+23274+27840b45 | 1 |
| gurolakman/ | 9abb3882bcbd | javapackages-tools plexus-utils | 0:5.3.0-2.module+el8.10.0+23274+27840b45 3.6.1 | 1 |
| gurolakman/ | 6537e8ed8de8 | javapackages-tools plexus-utils | 0:5.3.0-2.module+el8.10.0+23274+27840b45 3.6.1 | 1 |
| gurolakman/ | ce23b20a8a17 | javapackages-tools plexus-utils | 0:5.3.0-2.module+el8.10.0+23274+27840b45 3.6.1 | 1 |
| gurolakman/ | b22e746edd5d | javapackages-tools plexus-utils | 0:5.3.0-2.module+el8.10.0+23274+27840b45 3.6.1 | 1 |
| gurolakman/ | bf18525c5ad9 | javapackages-tools plexus-utils | 0:5.3.0-2.module+el8.10.0+23274+27840b45 3.6.1 | 1 |
| gurolakman/ | 8739565c3ea2 | javapackages-tools plexus-utils | 0:5.3.0-2.module+el8.10.0+23274+27840b45 3.6.1 | 1 |
| hazelcast/ | f9d34300d330 | javapackages-tools | 0:5.3.0-2.module+el8.10.0+23274+27840b45 | 1 |
| hotavneesh/ | a4579b163414 | plexus-utils | 3.6.1 | 1 |
| huertaslopez/ | e2c18bd65472 | plexus-utils | 3.6.1 | 1 |
| hugohg34/ | 171f61e8d7e2 | plexus-utils | 3.6.1 | 1 |
| ibmcom/ | ab3fd1fdfa18 | plexus-utils | 3.6.1 | 1 |
| ibmcom/ | e17bdccc5030 | plexus-utils | 3.6.1 | 1 |
| jenkinsci/ | a1f33f004659 | plexus-utils | 3.6.1 | 1 |
| kafkace/ | 7adc206bf5a4 | plexus-utils | 3.6.1 | 1 |
| kafkakraft/ | 062d697db7e5 | plexus-utils | 3.6.1 | 1 |
| kafkakraft/ | f261ad288fce | plexus-utils | 3.6.1 | 1 |
| kafkakraft/ | 2e4b593b878b | plexus-utils | 3.6.1 | 1 |
| krontechnology/ | 7feef7d2ab42 | plexus-utils | 3.6.1 | 1 |
| library/ | 0ae5169e3d0f | plexus-utils | 3.6.1 | 1 |
| library/ | bd5d420506d6 | plexus-utils | 3.6.1 | 1 |
| linuxserver/ | d286a7f55a59 | plexus-utils | 3.6.1 | 1 |
| lourdesmorente/ | 608745878cdb | plexus-utils | 3.6.1 | 1 |
| lsmaster/ | 061eb5fbfa00 | plexus-utils | 3.6.1 | 1 |
| molynx/ | 441c9f52f092 | plexus-utils | 3.6.1 | 1 |
| muluder/ | 43b597a93da7 | plexus-utils | 3.6.1 | 1 |
| odavid/ | e7ab3bbc948e | plexus-utils | 3.6.1 | 1 |
| omecproject/ | 5715e5648aa0 | plexus-utils | 3.6.1 | 1 |
| onosproject/ | 44914a8d4b3f | plexus-utils | 3.6.1 | 1 |
| openhab/ | d0aa4af452c1 | plexus-utils | 3.6.1 | 1 |
| opennms/ | 88869082a14f | plexus-utils | 3.6.1 | 1 |
| opensearchproject/ | 43b0cdaf26ed | plexus-utils | 3.6.1 | 1 |
| opsmx11/ | 5c50ca123d88 | plexus-utils | 3.6.1 | 1 |
| pcarrascoponce/ | 981fc482442c | plexus-utils | 3.6.1 | 1 |
| penpotapp/ | 5c835ffd87ab | plexus-utils | 3.6.1 | 1 |
| raykrueger/ | c8baf3de57bb | plexus-utils | 3.6.1 | 1 |
| rm3l/ | 9a7f732245a3 | apache-commons-cli apache-commons-codec apache-commons-io atinject google-guice guava httpcomponents-client httpcomponents-core jakarta-annotations jansi jsr-305 maven maven-resolver maven-shared-utils maven-wagon plexus-cipher plexus-classworlds plexus-containers plexus-interpolation plexus-sec-dispatcher plexus-utils sisu slf4j plexus-utils | 0:1.9.0-4.module+el9.8.0+24092+eb9f67d0 0:1.17.1-8.module+el9.8.0+24092+eb9f67d0 1:2.16.1-9.module+el9.8.0+24092+eb9f67d0 0:1.0.5-14.module+el9.8.0+24092+eb9f67d0 0:5.1.0-23.module+el9.8.0+24092+eb9f67d0 0:33.3.0-5.module+el9.8.0+24092+eb9f67d0 0:4.5.14-21.module+el9.8.0+24092+eb9f67d0 0:4.4.16-21.module+el9.8.0+24092+eb9f67d0 0:1.3.5-38.module+el9.8.0+24092+eb9f67d0 0:2.4.1-12.module+el9.8.0+24092+eb9f67d0 0:3.0.2-36.module+el9.8.0+24092+eb9f67d0 1:3.9.9-13.module+el9.8.0+24092+eb9f67d0 1:1.9.22-6.module+el9.8.0+24092+eb9f67d0 0:3.4.2-19.module+el9.8.0+24092+eb9f67d0 0:3.5.3-17.module+el9.8.0+24092+eb9f67d0 0:2.0-25.module+el9.8.0+24092+eb9f67d0 0:2.8.0-9.module+el9.8.0+24092+eb9f67d0 0:2.2.0-10.module+el9.8.0+24092+eb9f67d0 0:1.27-10.module+el9.8.0+24092+eb9f67d0 0:2.0-28.module+el9.8.0+24092+eb9f67d0 0:3.5.1-17.module+el9.8.0+24375+95248a69.1 1:0.9.0~M3-7.module+el9.8.0+24092+eb9f67d0 0:1.7.36-9.module+el9.8.0+24092+eb9f67d0 3.6.1 | 1 |
| rm3l/ | 3a5e1f95c132 | javapackages-tools | 0:5.3.0-2.module+el8.10.0+23274+27840b45 | 1 |
| rrobetti/ | 1141bd88232b | plexus-utils | 3.6.1 | 1 |
| slamdev/ | b4b029c9b15f | plexus-utils | 3.6.1 | 1 |
| slamdev/ | 3ca20c184c55 | plexus-utils | 3.6.1 | 1 |
| soldevelo/ | cfdc08c2f577 | plexus-utils | 3.6.1 | 1 |
| sonatype/ | 586060431b64 | javapackages-tools plexus-utils | 0:5.3.0-2.module+el8.10.0+23274+27840b45 3.6.1 | 1 |
| svtechnmaa/ | 6e368ace0977 | plexus-utils | 3.6.1 | 1 |
| viniciusfcf/ | bba8ee1b5cd5 | apache-commons-cli apache-commons-codec apache-commons-io apache-commons-lang3 atinject cdi-api google-guice guava httpcomponents-client httpcomponents-core jansi javapackages-tools jsr-305 maven maven-resolver maven-shared-utils maven-wagon plexus-cipher plexus-classworlds plexus-containers plexus-interpolation plexus-sec-dispatcher plexus-utils sisu slf4j plexus-utils | 0:1.5.0-5.module+el8.10.0+21301+657f54a3 0:1.15-8.module+el8.10.0+21301+657f54a3 1:2.11.0-3.module+el8.10.0+21301+657f54a3 0:3.12.0-8.module+el8.10.0+21301+657f54a3 0:1.0.5-5.module+el8.10.0+21301+657f54a3 0:2.0.2-7.module+el8.10.0+21301+657f54a3 0:4.2.3-10.module+el8.10.0+21301+657f54a3 0:31.0.1-5.module+el8.10.0+21301+657f54a3 0:4.5.13-6.module+el8.10.0+21301+657f54a3 0:4.4.13-8.module+el8.10.0+21301+657f54a3 0:2.4.0-7.module+el8.10.0+21301+657f54a3 0:5.3.0-2.module+el8.10.0+23274+27840b45 0:3.0.2-7.module+el8.10.0+21301+657f54a3 1:3.8.5-6.module+el8.10.0+21301+657f54a3 1:1.7.3-6.module+el8.10.0+21301+657f54a3 0:3.3.4-6.module+el8.10.0+21301+657f54a3 0:3.5.1-3.module+el8.10.0+21301+657f54a3 0:2.0-3.module+el8.10.0+21301+657f54a3 0:2.6.0-13.module+el8.10.0+21301+657f54a3 0:2.1.1-3.module+el8.10.0+21301+657f54a3 0:1.26-13.module+el8.10.0+21301+657f54a3 0:2.0-5.module+el8.10.0+21301+657f54a3 0:3.3.0-11.module+el8.10.0+24366+080b405b.1 1:0.3.5-3.module+el8.10.0+21301+657f54a3 0:1.7.32-5.module+el8.10.0+21301+657f54a3 3.6.1 | 1 |