CVE-2025-23215 — PMD is an extensible multilanguage static code analyzer. The passphrase for the PMD and PMD Designer release signing keys are included in jar published to Maven Central. The private key itself is not — CVE Database · The Intelligence Room