Skip to content
OpenAdvisories
High · 7.3 CVE-2022-0272 EUVD-2022-1596GHSA-2cfc-865j-gm4w

Improper Restriction of XML External Entity Reference in detekt/detekt

Published Apr 21, 2022 · Updated Aug 2, 2024 · Assigned by @huntrdev

Vendor: detekt Product: detekt/detekt Package: io.gitlab.arturbosch.detekt:detekt-core Ecosystem: Maven

Description

Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0.

Affected products

VendorProductAffectedFixed
detekt detekt/detekt unspecified – < 1.20.0 1.20.0

Affected packages

EcosystemPackageAffectedFixedRecord
Maven io.gitlab.arturbosch.detekt:detekt-core < 1.20.0 1.20.0 GHSA-2cfc-865j-gm4w

References