Skip to content
OpenAdvisories

Package · Maven

ro.pippo:pippo-jaxb

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2019-5442

    XML Entity Expansion in Pippo

    XML Entity Expansion (Billion Laughs Attack) on Pippo 1.12.0 results in Denial of Service.Entities are created recursively and large amounts of heap memory is taken. Eventually, the JVM process will run out of memory. Otherwise, if the OS does not bound the m…

    ro.pippo:pippo-jaxb Maven