2 results · Clear filters · Feed
-
Medium 5.3
XML external entity (XXE) processing ('external-parameter-entities' feature was not fully disabled))
All versions of com.puppycrawl.tools:checkstyle before 8.29 are vulnerable to XML External Entity (XXE) Injection due to an incomplete fix for CVE-2019-9658.
-
Medium 5.3
Moderate severity vulnerability that affects com.puppycrawl.tools:checkstyle
Checkstyle before 8.18 loads external DTDs by default.