CVE-2025-23215
3 advisories.
Maven/net.sourceforge.pmd:pmd-designer CVE-2025-23215: critical, EPSS 0.33%
PMD Designer's release key passphrase (GPG) available on Maven Central in cleartext
Action: Upgrade net.sourceforge.pmd:pmd-designer to 7.10.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.0.0 | 7.10.0 | - |
Fixed versions
| 7.10.0 |
Sources
- osv: GHSA-88m4-h43f-wx84
- https://github.com/pmd/pmd/security/advisories/GHSA-88m4-h43f-wx84
- https://nvd.nist.gov/vuln/detail/CVE-2025-23215
- https://github.com/pmd/pmd-designer/commit/1548f5f27ba2981b890827fecbd0612fa70a0362
- https://github.com/pmd/pmd-designer/commit/e87a45312753ec46b3e5576c6f6ac1f7de2f5891
- https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/net/sourceforge/pmd/pmd-designer/README.md
- https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/net/sourceforge/pmd/pmd-designer/pmd-designer-7.0.0.diffoscope
- https://github.com/jvm-repo-rebuild/reproducible-central?tab=readme-ov-file#reproducible-builds-for-maven-central-repository
- https://github.com/pmd/pmd
CVE-2025-23215 · published · modified · JSON
Maven/net.sourceforge.pmd:pmd-ui CVE-2025-23215: critical, EPSS 0.33%
PMD Designer's release key passphrase (GPG) available on Maven Central in cleartext
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.14.0 | - | 6.19.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-88m4-h43f-wx84#Maven/net.sourceforge.pmd:pmd-ui
- https://github.com/pmd/pmd/security/advisories/GHSA-88m4-h43f-wx84
- https://nvd.nist.gov/vuln/detail/CVE-2025-23215
- https://github.com/pmd/pmd-designer/commit/1548f5f27ba2981b890827fecbd0612fa70a0362
- https://github.com/pmd/pmd-designer/commit/e87a45312753ec46b3e5576c6f6ac1f7de2f5891
- https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/net/sourceforge/pmd/pmd-designer/README.md
- https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/net/sourceforge/pmd/pmd-designer/pmd-designer-7.0.0.diffoscope
- https://github.com/jvm-repo-rebuild/reproducible-central?tab=readme-ov-file#reproducible-builds-for-maven-central-repository
- https://github.com/pmd/pmd
CVE-2025-23215 · published · modified · JSON
Maven/net.sourceforge.pmd:pmd-core CVE-2025-23215: critical, EPSS 0.33%
PMD Designer's release key passphrase (GPG) available on Maven Central in cleartext
Action: Upgrade net.sourceforge.pmd:pmd-core to 7.10.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.21.0 | 7.10.0 | - |
Fixed versions
| 7.10.0 |
Sources
- osv: GHSA-88m4-h43f-wx84#Maven/net.sourceforge.pmd:pmd-core
- https://github.com/pmd/pmd/security/advisories/GHSA-88m4-h43f-wx84
- https://nvd.nist.gov/vuln/detail/CVE-2025-23215
- https://github.com/pmd/pmd-designer/commit/1548f5f27ba2981b890827fecbd0612fa70a0362
- https://github.com/pmd/pmd-designer/commit/e87a45312753ec46b3e5576c6f6ac1f7de2f5891
- https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/net/sourceforge/pmd/pmd-designer/README.md
- https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/net/sourceforge/pmd/pmd-designer/pmd-designer-7.0.0.diffoscope
- https://github.com/jvm-repo-rebuild/reproducible-central?tab=readme-ov-file#reproducible-builds-for-maven-central-repository
- https://github.com/pmd/pmd
CVE-2025-23215 · published · modified · JSON