Maven/org.geotools:gt-xsd-core: critical 9.9
GeoTools has XML External Entity (XXE) Processing Vulnerability in XSD schema handling
Action: Upgrade org.geotools:gt-xsd-core to 28.6.1 (28.x), 31.7 (31.x), 32.3 (32.x) or 33.1 (33.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 33.0 | 33.1 | - |
| 32.0 | 32.3 | - |
| 29.0 | 31.7 | - |
| 0 | 28.6.1 | - |
Fixed versions
| 33.1 | 32.3 | 31.7 | 28.6.1 |
Sources
- osv: GHSA-826p-4gcg-35vw
- https://github.com/geonetwork/core-geonetwork/security/advisories/GHSA-2p76-gc46-5fvc
- https://github.com/geoserver/geoserver/security/advisories/GHSA-jj54-8f66-c5pc
- https://github.com/geotools/geotools/security/advisories/GHSA-826p-4gcg-35vw
- https://github.com/geotools/geotools
published · modified · JSON