Maven/io.qameta.allure.plugins:xunit-xml-plugin CVE-2025-52888: high 7.5
Allure Report allows Improper XXE Restriction via DocumentBuilderFactory
Action: Upgrade io.qameta.allure.plugins:xunit-xml-plugin to 2.34.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.34.1 | - |
Fixed versions
| 2.34.1 |
Sources
- osv: GHSA-h7qf-qmf3-85qg
- https://github.com/allure-framework/allure2/security/advisories/GHSA-h7qf-qmf3-85qg
- https://nvd.nist.gov/vuln/detail/CVE-2025-52888
- https://github.com/allure-framework/allure2/commit/cbcb33719851ff70adce85d38e15d20fc58d4eb7
- https://github.com/allure-framework/allure2
CVE-2025-52888 · published · modified · JSON