{"action":"Upgrade com.github.binarywang:weixin-java-common to 3.3.2.B or later.","affected":[{"fixed":"3.3.2.B","introduced":"0"}],"component":"com.github.binarywang:weixin-java-common","cve_ids":["CVE-2019-5312"],"ecosystem":"Maven","epss":0.01683,"exploited":false,"fixed_versions":["3.3.2.B"],"ghsa_id":"GHSA-h755-h99p-9ffv","id":"tcs_01M5N8ZY5E2R4QPN3ZT900QPZN","modified_at":"2026-09-10T03:49:23.337970679Z","published_at":"2022-05-14T01:40:24Z","references":["https://osv.dev/vulnerability/GHSA-h755-h99p-9ffv","https://nvd.nist.gov/vuln/detail/CVE-2019-5312","https://github.com/Wechat-Group/WxJava/issues/903","https://github.com/Wechat-Group/WxJava/issues/903#issuecomment-453747039","https://github.com/Wechat-Group/WxJava/commit/8ec61d1328f50e23cd14285a950ca57a088b32b2"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-h755-h99p-9ffv","url":"https://osv.dev/vulnerability/GHSA-h755-h99p-9ffv"}],"summary":"XML External Entity Reference in weixin-java-tools"}