{"action":"Upgrade com.diffplug.spotless:spotless-maven-plugin to 1.20.0 or later.","affected":[{"fixed":"1.20.0","introduced":"0"}],"component":"com.diffplug.spotless:spotless-maven-plugin","cve_ids":["CVE-2019-9843"],"ecosystem":"Maven","epss":0.01499,"exploited":false,"fixed_versions":["1.20.0"],"ghsa_id":"GHSA-7v35-qwwj-p98g","id":"tcs_01M5N8K5Y6CDF6WD7R8MPW8PJV","modified_at":"2023-11-08T04:01:47.951255Z","published_at":"2019-07-05T21:07:40Z","references":["https://osv.dev/vulnerability/GHSA-7v35-qwwj-p98g","https://nvd.nist.gov/vuln/detail/CVE-2019-9843","https://github.com/diffplug/spotless/issues/358","https://github.com/diffplug/spotless/pull/369","https://github.com/diffplug/spotless","https://github.com/diffplug/spotless/blob/master/plugin-gradle/CHANGES.md#version-3200---march-11th-2018-javadoc-jcenter","https://github.com/diffplug/spotless/blob/master/plugin-maven/CHANGES.md#version-1200---march-14th-2018-javadoc-jcenter"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-7v35-qwwj-p98g#Maven/com.diffplug.spotless:spotless-maven-plugin","url":"https://osv.dev/vulnerability/GHSA-7v35-qwwj-p98g"}],"summary":"Improper Restriction of XML External Entity Reference in DiffPlug Spotless"}