Medium DLA-2099-1 1 CVE

checkstyle - security update

Published Feb 10, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	checkstyle	5.9-1+deb8u2

Vulnerabilities 1

Medium 5.3

CVE-2019-10782

XML external entity (XXE) processing ('external-parameter-entities' feature was not fully disabled))

All versions of com.puppycrawl.tools:checkstyle before 8.29 are vulnerable to XML External Entity (XXE) Injection due to an incomplete fix for CVE-2019-9658.

com.puppycrawl.tools:checkstyle checkstyle checkstyle Debian Ubuntu Maven

Jan 30, 2020