Skip to content

@cyclonedx/cdxgen: Maven project scanning may allow shell command injection through repository-controlled module paths

Moderate severity GitHub Reviewed Published May 22, 2026 in cdxgen/cdxgen • Updated Jun 26, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts