Upgrade maven-javadoc-plugin. Version 2.9.1 contains fix for Javadoc vulnerability (CVE-2013-1571 [1], VU#225657 [2]) See http://markmail.org/message/3smkmpyvx4i4kphw