Maven/org.xmlunit:xmlunit-core CVE-2024-31573: low, EPSS 0.32%
XMLUnit for Java has Insecure Defaults when Processing XSLT Stylesheets
Action: Upgrade org.xmlunit:xmlunit-core to 2.10.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.10.0 | - |
Fixed versions
| 2.10.0 |
Sources
- osv: GHSA-chfm-68vv-pvw5
- https://github.com/xmlunit/xmlunit/security/advisories/GHSA-chfm-68vv-pvw5
- https://github.com/xmlunit/xmlunit/issues/264
- https://github.com/xmlunit/xmlunit/commit/b81d48b71dfd2868bdfc30a3e17ff973f32bc15b
- https://docs.oracle.com/en/java/javase/22/security/java-api-xml-processing-jaxp-security-guide.html#GUID-E345AA09-801E-4B95-B83D-7F0C452538AA
- https://github.com/xmlunit/xmlunit
CVE-2024-31573 · published · modified · JSON