Maven/io.github.robothy:local-s3-rest CVE-2025-27136: medium 5.5, EPSS 0.53%
LocalS3 CreateBucketConfiguration Endpoint XML External Entity (XXE) Injection
Action: Upgrade io.github.robothy:local-s3-rest to 1.21 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.21 | - |
Fixed versions
| 1.21 |
Sources
- osv: GHSA-g6wm-2v64-wq36
- nvd: CVE-2025-27136
- https://github.com/Robothy/local-s3/security/advisories/GHSA-g6wm-2v64-wq36
- https://github.com/Robothy/local-s3/commit/d6ed756ceb30c1eb9d4263321ac683d734f8836f
- https://github.com/Robothy/local-s3
CVE-2025-27136 · published · modified · JSON