Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Maven 3.8.9‑r2 allows attackers to run code
published 3 months ago
Summary
The Maven build tool version 3.8.9‑r2 contains two security weaknesses that could let a malicious user execute code on the machine that runs Maven. This could compromise your software build process and expose your organization to data loss or disruption. Apply the released Maven update or the provided patches as soon as possible to eliminate the risk.
What to do
- Update cleanstart maven to version 3.8.9-r2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | maven |
< 3.8.9-r2 Fix: upgrade to 3.8.9-r2
|
Original advisory text
Security fixes in maven 3.8.9-r2
Package maven version 3.8.9-r2 fixes 2 vulnerabilities: ghsa-6fmv-xxpf-w3cw, CVE-2025-67030
References
Timeline
Published30 Jul 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-QC46400 · OSV
Track software like this
Free during beta