Package · Maven

io.qameta.allure.plugins:trx-plugin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.5

CVE-2025-52888

Allure 2's xunit-xml-plugin Vulnerable to Improper XXE Restriction

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. A critical XML External Entity (XXE) vulnerability exists in the xunit-xml-plugin used by Allure 2 prior to version 2.34.1. The plugin fails to securely configure the X…

allure-framework allure2 io.qameta.allure.plugins:junit-xml-plugin io.qameta.allure.plugins:xunit-xml-plugin Maven

Jun 24, 2025