Skip to content
OpenAdvisories

Vendor

allure-framework

4 known vulnerabilities.

Products

allure2 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2026-33166

    Allure Report has an Arbitrary File Read via Path Traversal in Attachment Processing (Allure 1, Allure 2, and XCTest Readers)

    Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. The Allure report generator prior to version 2.38.0 is vulnerable to an arbitrary file read via path traversal when processing test results. An attacker can craft a mal…

    allure-framework allure2 io.qameta.allure:allure-generator Maven
  • High 7.5
    CVE-2025-52888

    Allure 2's xunit-xml-plugin Vulnerable to Improper XXE Restriction

    Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. A critical XML External Entity (XXE) vulnerability exists in the xunit-xml-plugin used by Allure 2 prior to version 2.34.1. The plugin fails to securely configure the X…

    allure-framework allure2 io.qameta.allure.plugins:xunit-xml-plugin io.qameta.allure.plugins:trx-plugin Maven