Maven/com.hazelcast:hazelcast CVE-2022-0265: critical 9.8, EPSS 2.79%
XML External Entity Reference in Hazelcast
Action: Upgrade com.hazelcast:hazelcast to 5.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.1-beta1 | 5.1 | - |
Fixed versions
| 5.1 |
Sources
- osv: GHSA-99wh-973f-779p
- https://nvd.nist.gov/vuln/detail/CVE-2022-0265
- https://github.com/hazelcast/hazelcast/pull/20407
- https://github.com/hazelcast/hazelcast/commit/4d6b666cd0291abd618c3b95cdbb51aa4208e748
- https://github.com/hazelcast/hazelcast
- https://huntr.dev/bounties/d63972a2-b910-480a-a86b-d1f75d24d563
CVE-2022-0265 · published · modified · JSON