Threats affecting pkg:maven/org.apache.apisix/java-plugin-runner

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.8	EPSS 0.2%	CVE-2025-27446Apache APISIX Java Plugin Runner · Incorrect Permissions High7.8EPSS 0.2%2025-07-06CVE Database V5CVE-2025-27446 Incorrect Permission Assignment for Critical Resource vulnerability in Apache APISIX(java-plugin-runner). Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges. This issue affects Apache APISIX(java-plugin-runner): from 0.2.0 through 0.5.0. Users are recommended to upgrade to version 0.6.0 or higher, which fixes the issue. EPSS 0.2%Vulnerability Apache Software Foundation CWE-732	CVE Database V5	2025-07-06

Page 1 of 1