Maven/io.github.robothy:local-s3-rest: medium
LocalS3 Project Vulnerable to XML External Entity (XXE) Injection via Bucket Tagging API
Action: Upgrade io.github.robothy:local-s3-rest to 1.21 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.21 | - |
Fixed versions
| 1.21 |
Sources
- osv: GHSA-v232-254c-m6p7
- https://github.com/Robothy/local-s3/security/advisories/GHSA-v232-254c-m6p7
- https://github.com/Robothy/local-s3/commit/d6ed756ceb30c1eb9d4263321ac683d734f8836f
- https://github.com/Robothy/local-s3
published · modified · JSON