{"action":"Upgrade net.sourceforge.pmd:pmd-designer to 7.10.0 or later.","affected":[{"fixed":"7.10.0","introduced":"7.0.0"}],"component":"net.sourceforge.pmd:pmd-designer","cve_ids":["CVE-2025-23215"],"ecosystem":"Maven","epss":0.00329,"exploited":false,"fixed_versions":["7.10.0"],"ghsa_id":"GHSA-88m4-h43f-wx84","id":"tcs_01M5N8M9RC3RMBJF3CSNB0W01X","modified_at":"2025-04-04T21:21:27.362409Z","published_at":"2025-01-31T17:34:09Z","references":["https://osv.dev/vulnerability/GHSA-88m4-h43f-wx84","https://github.com/pmd/pmd/security/advisories/GHSA-88m4-h43f-wx84","https://nvd.nist.gov/vuln/detail/CVE-2025-23215","https://github.com/pmd/pmd-designer/commit/1548f5f27ba2981b890827fecbd0612fa70a0362","https://github.com/pmd/pmd-designer/commit/e87a45312753ec46b3e5576c6f6ac1f7de2f5891","https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/net/sourceforge/pmd/pmd-designer/README.md","https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/net/sourceforge/pmd/pmd-designer/pmd-designer-7.0.0.diffoscope","https://github.com/jvm-repo-rebuild/reproducible-central?tab=readme-ov-file#reproducible-builds-for-maven-central-repository","https://github.com/pmd/pmd"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-88m4-h43f-wx84","url":"https://osv.dev/vulnerability/GHSA-88m4-h43f-wx84"}],"summary":"PMD Designer's release key passphrase (GPG) available on Maven Central in cleartext"}