CVE-2018-1000844
1 advisory.
Maven/com.squareup.retrofit2:retrofit CVE-2018-1000844: critical 9.1
XML External Entity (XXE) vulnerability in Square Retrofit
Action: Upgrade com.squareup.retrofit2:retrofit to 2.5.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.5.0 | - |
Fixed versions
| 2.5.0 |
Sources
- osv: GHSA-j379-9jr9-w5cq
- https://nvd.nist.gov/vuln/detail/CVE-2018-1000844
- https://github.com/square/retrofit/pull/2735
- https://github.com/advisories/GHSA-j379-9jr9-w5cq
- https://github.com/square/retrofit
CVE-2018-1000844 · published · modified · JSON