Skip to content
OpenAdvisories
Medium ELSA-2026-59372 1 CVE

Moderate: assertj-core security update (Oracle Linux 10)

Published Aug 26, 2026 · Updated Aug 26, 2026

Ecosystem: Oracle Linux

Summary

[3.24.2-9.1]
- Fix CVE-2026-24400: add XXE protection to XmlStringPrettyFormatter
- Resolves: RHEL-183469

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 10 assertj-core 0:3.24.2-9.el10_2.1
Oracle Linux · 10 assertj-core-javadoc 0:3.24.2-9.el10_2.1

Vulnerabilities 1

  • High 8.2
    CVE-2026-24400

    AssertJ has XML External Entity (XXE) vulnerability when parsing untrusted XML via isXmlEqualTo assertion

    AssertJ provides Fluent testing assertions for Java and the Java Virtual Machine (JVM). Starting in version 1.4.0 and prior to version 3.27.7, an XML External Entity (XXE) vulnerability exists in `org.assertj.core.util.xml.XmlStringPrettyFormatter`: the `toXm…

    assertj assertj javapackages-bootstrap assertj-core Debian Ubuntu Azure Linux Maven