Vulnerability Database · Debian · Package report
plexus-utils2: vulnerability history, versions and safety
plexus-utils2 is a package in the Debian ecosystem. Vulert records 7 vulnerabilities for it across 5 releases, from Jan 2018 to Mar 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.
No patched version yet — these are the ones to plan around.
See the unfixed vulnerabilities →No published version shipped hostile code.
Vulert verdict on plexus-utils2 i
Updated on 23 Oct 2026
Careful: one of the 7 vulnerabilities Vulert records for this package has no fix yet. Plan around that one, or apply its workaround. The rest have a fixed version to move to.
What to do: Plan around the 1 vulnerability with no published fix: each lists the affected range and any workaround that reduces exposure. No fix yet: Vulert alerts you the moment one is published. Monitor it with Vulert →
- Vulnerabilities on record 7 over 8 years · 1 in the last year i
- Latest disclosure 25 Mar 2026 i
- Highest CVSS 9.8 i
- With no published fix 1 i
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert holds for plexus-utils2, newest first, with the vulnerabilities that name it. A version with a count of zero has no recorded vulnerabilities; open a version to see the vulnerabilities it is exposed to.
Newest 5 of 5 versions on record. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 1 of the 7 were recorded in the last 12 months.
03 Vulnerabilities
Recorded vulnerabilities for plexus-utils2
| Vulnerability | Severity | Fixed version ↓ | Disclosed ↓ |
|---|---|---|---|
| Command Injection Vulnerability in Plexus Utils 2: A Critical Security Flaw | 9.8 critical | 3.0.22-1 | 03 Jan 2018 |
| Critical Directory Traversal Vulnerability in plexus-utils2 Package | 8.8 high | No fix published | 25 Mar 2026 |
| Directory Traversal Vulnerability in plexus-utils2: Access to Arbitrary Files | 7.5 high | 3.0.24-1 | 25 Sep 2023 |
| XML Injection Vulnerability in plexus-utils2: CVE-2022-4245 | 4.3 medium | 3.0.24-1 | 25 Sep 2023 |
| Command Injection Vulnerability in Plexus-utils2 Package | N/A unrated | 3.0.22-1 | 03 Jan 2018 |
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
