Vulnerabilities in pmd

2 results
CVE-2025-23215CRITICALPMD Designer's release key passphrase (GPG) available on Maven Central in cleartextEPSS 0.3%CVE-2026-28338MEDIUMPMD Designer has Stored XSS in VBHTMLRenderer and YAHTMLRenderer via unescaped violation messagesEPSS 0.3%