Ubuntu Security Notice USN-5805-1

Ubuntu Security Notice 5805-1 - It was discovered that Apache Maven followed repositories that are defined in a dependency’s Project Object Model even if the repositories weren't encryptedh. An attacker could use this vulnerability to take over a repository, execute arbitrary code or cause a denial of service.

apache code defined denial of service dependency maven notice object project repositories repository security security notice service ubuntu usn vulnerability