Critical DLA-1299-1 1 CVE

libjgraphx-java - security update

Published Mar 4, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 7	libjgraphx-java	1.4.1.0-3+deb7u1

Vulnerabilities 1

Critical 9.8

CVE-2017-18197

mxGraph vulnerable to XXE attacks

In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert() is missing flags to prevent XML External Entity (XXE) attacks, as demonstrated by /ServerView.

mxgraph libjgraphx-java libjgraphx-java Debian Ubuntu npm

Feb 24, 2018