{"action":"Upgrade io.qameta.allure.plugins:xunit-xml-plugin to 2.34.1 or later.","affected":[{"fixed":"2.34.1","introduced":"0"}],"component":"io.qameta.allure.plugins:xunit-xml-plugin","cve_ids":["CVE-2025-52888"],"ecosystem":"Maven","exploited":false,"fixed_versions":["2.34.1"],"ghsa_id":"GHSA-h7qf-qmf3-85qg","id":"tcs_01M5N900FAQZ1TG9CMX26G4RAC","modified_at":"2025-06-25T14:57:14.551226Z","published_at":"2025-06-25T14:14:09Z","references":["https://osv.dev/vulnerability/GHSA-h7qf-qmf3-85qg","https://github.com/allure-framework/allure2/security/advisories/GHSA-h7qf-qmf3-85qg","https://nvd.nist.gov/vuln/detail/CVE-2025-52888","https://github.com/allure-framework/allure2/commit/cbcb33719851ff70adce85d38e15d20fc58d4eb7","https://github.com/allure-framework/allure2"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-h7qf-qmf3-85qg","url":"https://osv.dev/vulnerability/GHSA-h7qf-qmf3-85qg"}],"summary":"Allure Report allows Improper XXE Restriction via DocumentBuilderFactory"}