Maven/com.diffplug.spotless:spotless-maven-plugin CVE-2019-9843: high 7.5, EPSS 1.50%

Improper Restriction of XML External Entity Reference in DiffPlug Spotless

Action: Upgrade com.diffplug.spotless:spotless-maven-plugin to 1.20.0 or later.

Affected

Fixed versions

Sources

• osv: GHSA-7v35-qwwj-p98g#Maven/com.diffplug.spotless:spotless-maven-plugin
• https://nvd.nist.gov/vuln/detail/CVE-2019-9843
• https://github.com/diffplug/spotless/issues/358
• https://github.com/diffplug/spotless/pull/369
• https://github.com/diffplug/spotless
• https://github.com/diffplug/spotless/blob/master/plugin-gradle/CHANGES.md#version-3200---march-11th-2018-javadoc-jcenter
• https://github.com/diffplug/spotless/blob/master/plugin-maven/CHANGES.md#version-1200---march-14th-2018-javadoc-jcenter

CVE-2019-9843 · published 2019-07-05T21:07:40Z · modified 2023-11-08T04:01:47.951255Z · JSON