Vulnerability record: CVE-2017-1000487 in codehaus-plexus/plexus-utils (version 3.0.15)
Weakness: CWE-078 \u2014 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
GitHub Security Advisory: GHSA-8vhq-qq4p-grq3
Repository: https://github.com/codehaus-plexus/plexus-utils
Buggy commit: 3b271b43f9e5021b4232fc2ffdfb4e469c7f8685
Fix commit(s): b38a1b3a4352303e4312b2bb601a0d7ec6e28f41