{"action":"Upgrade io.qameta.allure.plugins:trx-plugin to 2.34.1 or later.","affected":[{"fixed":"2.34.1","introduced":"0"}],"component":"io.qameta.allure.plugins:trx-plugin","cve_ids":["CVE-2025-52888"],"ecosystem":"Maven","epss":0.0037,"exploited":false,"fixed_versions":["2.34.1"],"ghsa_id":"GHSA-h7qf-qmf3-85qg","id":"tcs_01M5N900QEKJMRFG7P90J9Q54T","modified_at":"2025-06-25T14:57:14.551226Z","published_at":"2025-06-25T14:14:09Z","references":["https://osv.dev/vulnerability/GHSA-h7qf-qmf3-85qg","https://github.com/allure-framework/allure2/security/advisories/GHSA-h7qf-qmf3-85qg","https://nvd.nist.gov/vuln/detail/CVE-2025-52888","https://github.com/allure-framework/allure2/commit/cbcb33719851ff70adce85d38e15d20fc58d4eb7","https://github.com/allure-framework/allure2"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-h7qf-qmf3-85qg#Maven/io.qameta.allure.plugins:trx-plugin","url":"https://osv.dev/vulnerability/GHSA-h7qf-qmf3-85qg"}],"summary":"Allure Report allows Improper XXE Restriction via DocumentBuilderFactory"}