Executive brief
PMD Designer's release key passphrase (GPG) available on Maven Central in cleartext
Affected products
- Maven net.sourceforge.pmd:pmd-core
- Maven net.sourceforge.pmd:pmd-ui
- Maven net.sourceforge.pmd:pmd-designer
Junglewise Threat Intelligence
CVE-2025-23215: PMD Designer's release key passphrase (GPG) available on Maven Central in cleartext
CVE-2025-23215 · Severity: medium · CVSS 4 · Published 2025-01-31
Technologies: net.sourceforge.pmd:pmd-core (Maven). Vendors: Maven.