CVE-2024-47197: Maven Archetype Plugin: Maven Archetype integration-test may package local settings into the published artifact, possibly containing credentials

2024-09-26 Thread Slawomir Jaranowski
Severity: low Affected versions: - Maven Archetype Plugin 3.2.1 before 3.3.0 Description: Exposure of Sensitive Information to an Unauthorized Actor, Insecure Storage of Sensitive Information vulnerability in Maven Archetype Plugin. This issue affects Maven Archetype Plugin: from 3.2.1 before

[ANN] Apache Maven Archetype Plugin 3.3.0 Released

2024-09-26 Thread Slawomir Jaranowski
The Apache Maven team is pleased to announce the release of the Apache Maven Archetype Plugin, version 3.3.0 The Archetype Plugin allows the user to create a Maven project from an existing template called an archetype. It also allows the user to create an archetype from an existing project. http