maven package report

Is org.opennms:opennms-util safe?

1 known vulnerability, worst severity HIGH.

cvss

7.5

how bad it is if exploited, out of 10

epss

2.4%

chance of exploitation in the next 30 days

xyz score

3.4

CyberXYZ composite, out of 10

fig. 01 — GHSA-c3mp-9vx3-2rvv, the advisory selected below

// advisories

GHSA-c3mp-9vx3-2rvv

HIGHCVE-2021-3396

OpenNMS Meridian 2016, 2017, 2018 before 2018.1.25, 2019 before 2019.1.16, and 2020 before 2020.1.5, Horizon 1.2 through 27.0.4, and Newts <1.5.3 has Incorrect Access Control, which allows local and remote code execution using JEXL expressions.

Affected: >= 16.0.0, <= 27.0.3
Fixed in: 27.0.4
Weakness: CWE-863
Published: 2022-05-24
Source: github

GHSA NVD MITRE reference reference reference

// dependencies

0 direct

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so maven packages are not covered.

Checked 2026-09-22 at 00:52 UTC. The most recent advisory here was published 2022-05-24. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is org.opennms:opennms-util safe? maven package security report | CyberXYZ