Search results

Potential Path Traversal (CWE-22) via Unsanitized Class Name in Extension Loading

Status: Open.

#655 In pf4j/pf4j;

· Crispy-fried-chicken opened on Mar 18, 2026

Potential Path Traversal (CWE-22) in PropertiesPluginDescriptorFinder.getPropertiesPath

Status: Open.

#654 In pf4j/pf4j;

· Crispy-fried-chicken opened on Mar 15, 2026

Path Traversal in BasePluginLoader.loadJars

Status: Open.

#653 In pf4j/pf4j;

· Crispy-fried-chicken opened on Mar 15, 2026

[Security] Potential Path Traversal in BasePluginLoader via PluginClasspath

Status: Open.

#652 In pf4j/pf4j;

· Crispy-fried-chicken opened on Mar 15, 2026

[Security] Potential Format String Injection in StringUtils.format (CWE-74)

Status: Open.

#651 In pf4j/pf4j;

· Crispy-fried-chicken opened on Mar 15, 2026

Cannot load a plugin from a jar build with gradle.

Status: Open.

#649 In pf4j/pf4j;

· zzuegg opened on Feb 3, 2026

Implement a BaseExtension attribute

enhancement

Status: Open.

#612 In pf4j/pf4j;

· boris-petrov opened on Apr 24, 2025

add sourcecode analysis

enhancement

Status: Open.

#457 In pf4j/pf4j;

· wolframhaussig opened on Jun 14, 2021

working with maven release plugin or any plugin with version x.y.z-LABEL

Status: Open.

#440 In pf4j/pf4j;

· asafbennatan opened on Apr 7, 2021

rework the demo application

enhancement

proposal

Status: Open.

#304 In pf4j/pf4j;

· pinhead84 opened on Mar 23, 2019

Document how Extensions are instantiated

documentation

Status: Open.

#293 In pf4j/pf4j;

· dmitry-timofeev opened on Mar 4, 2019

Document when unloadPlugin can fail

documentation

Status: Open.

#291 In pf4j/pf4j;

· dmitry-timofeev opened on Mar 1, 2019