Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/com.jamesmurty.utils/java-xmlbuilder@1.2
Typemaven
Namespacecom.jamesmurty.utils
Namejava-xmlbuilder
Version1.2
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version1.2
Latest_non_vulnerable_version1.2
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-7ubs-x5yg-zfg7
vulnerability_id VCID-7ubs-x5yg-zfg7
summary 
Improper Restriction of XML External Entity Reference
A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. Upgrading to version 1.2 is able to address this issue. The name of the patch is e6fddca201790abab4f2c274341c0bb8835c3e73. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-221480.
references
0
reference_url https://github.com/jmurty/java-xmlbuilder/commit/e6fddca201790abab4f2c274341c0bb8835c3e73
reference_id
reference_type
scores
url https://github.com/jmurty/java-xmlbuilder/commit/e6fddca201790abab4f2c274341c0bb8835c3e73
1
reference_url https://github.com/jmurty/java-xmlbuilder/issues/6
reference_id
reference_type
scores
url https://github.com/jmurty/java-xmlbuilder/issues/6
2
reference_url https://github.com/jmurty/java-xmlbuilder/releases/tag/v1.2
reference_id
reference_type
scores
url https://github.com/jmurty/java-xmlbuilder/releases/tag/v1.2
3
reference_url https://vuldb.com/?ctiid.221480
reference_id
reference_type
scores
url https://vuldb.com/?ctiid.221480
4
reference_url https://vuldb.com/?id.221480
reference_id
reference_type
scores
url https://vuldb.com/?id.221480
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-125087
reference_id CVE-2014-125087
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2014-125087
6
reference_url https://github.com/advisories/GHSA-3vrc-rrpw-r5pw
reference_id GHSA-3vrc-rrpw-r5pw
reference_type
scores
url https://github.com/advisories/GHSA-3vrc-rrpw-r5pw
fixed_packages
0
url pkg:maven/com.jamesmurty.utils/java-xmlbuilder@1.2
purl pkg:maven/com.jamesmurty.utils/java-xmlbuilder@1.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.jamesmurty.utils/java-xmlbuilder@1.2
aliases CVE-2014-125087, GHSA-3vrc-rrpw-r5pw
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7ubs-x5yg-zfg7
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/com.jamesmurty.utils/java-xmlbuilder@1.2