{"action":"Upgrade com.puppycrawl.tools:checkstyle to 8.29 or later.","affected":[{"fixed":"8.29","introduced":"0"}],"component":"com.puppycrawl.tools:checkstyle","cve_ids":["CVE-2019-10782"],"ecosystem":"Maven","epss":0.01527,"exploited":false,"fixed_versions":["8.29"],"ghsa_id":"GHSA-763g-fqq7-48wg","id":"tcs_01M5N8HJE7GP0RGG5PDER2F3M3","modified_at":"2026-07-08T05:56:15.976658391Z","published_at":"2020-01-31T18:00:07Z","references":["https://osv.dev/vulnerability/GHSA-763g-fqq7-48wg","https://github.com/checkstyle/checkstyle/security/advisories/GHSA-763g-fqq7-48wg","https://nvd.nist.gov/vuln/detail/CVE-2019-10782","https://github.com/checkstyle/checkstyle/issues/7468","https://github.com/checkstyle/checkstyle/commit/c46a16d177e6797895b195c288ae9a9a096254b8","https://lists.apache.org/thread.html/r8aaf4ee16bbaf6204731d4770d96ebb34b258cd79b491f9cdd7f2540@%3Ccommits.nifi.apache.org%3E","https://lists.debian.org/debian-lts-announce/2020/02/msg00008.html","https://snyk.io/vuln/SNYK-JAVA-COMPUPPYCRAWLTOOLS-543266"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-763g-fqq7-48wg","url":"https://osv.dev/vulnerability/GHSA-763g-fqq7-48wg"}],"summary":"XML external entity (XXE) processing ('external-parameter-entities' feature was not fully disabled))"}