Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/dom4j@2.1.1-1?distro=trixie
purl pkg:deb/debian/dom4j@2.1.1-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-nmya-eyxd-9ybe dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later. CVE-2018-1000632
GHSA-6pcc-3rfx-4gpm

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:19:23.630182+00:00 Debian Importer Fixing VCID-nmya-eyxd-9ybe https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:25:46.363289+00:00 Debian Importer Fixing VCID-nmya-eyxd-9ybe https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-02T17:14:28.162651+00:00 Debian Importer Fixing VCID-nmya-eyxd-9ybe https://security-tracker.debian.org/tracker/data/json 38.1.0