Amazon Linux 2023 — javapackages-bootstrap — multiple vulnerabilities (7 CVEs) — patch and remediation guide
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1581 Related CVEs: CVE-2025-67030 CVE-2025-48734 CVE-2023-37460 CVE-2024-25710 CVE-2026-24400 CVE-2024-47554 CVE-2025-48924 Upstream summary: Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to […]