{"action":"Upgrade org.xmlunit:xmlunit-core to 2.10.0 or later.","affected":[{"fixed":"2.10.0","introduced":"0"}],"component":"org.xmlunit:xmlunit-core","cve_ids":["CVE-2024-31573"],"ecosystem":"Maven","epss":0.0032,"exploited":false,"fixed_versions":["2.10.0"],"ghsa_id":"GHSA-chfm-68vv-pvw5","id":"tcs_01M5N8SEWTR8AQM5Y74JKH34RB","modified_at":"2024-12-05T05:28:04.518630Z","published_at":"2024-05-01T16:40:01Z","references":["https://osv.dev/vulnerability/GHSA-chfm-68vv-pvw5","https://github.com/xmlunit/xmlunit/security/advisories/GHSA-chfm-68vv-pvw5","https://github.com/xmlunit/xmlunit/issues/264","https://github.com/xmlunit/xmlunit/commit/b81d48b71dfd2868bdfc30a3e17ff973f32bc15b","https://docs.oracle.com/en/java/javase/22/security/java-api-xml-processing-jaxp-security-guide.html#GUID-E345AA09-801E-4B95-B83D-7F0C452538AA","https://github.com/xmlunit/xmlunit"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-chfm-68vv-pvw5","url":"https://osv.dev/vulnerability/GHSA-chfm-68vv-pvw5"}],"summary":"XMLUnit for Java has Insecure Defaults when Processing XSLT Stylesheets"}