Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/libxerces2-java@2.12.1-1
purl pkg:deb/debian/libxerces2-java@2.12.1-1
Next non-vulnerable version 2.12.2-1
Latest non-vulnerable version 2.12.2-1
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-c2s2-wsy6-sufn
Aliases:
CVE-2022-23437
GHSA-h65f-jvqw-m9fj
XML Injection (aka Blind XPath Injection) There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present within XercesJ version 2.12.1 and the previous versions.
2.12.2-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T10:27:01.922047+00:00 Debian Importer Affected by VCID-c2s2-wsy6-sufn https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T07:02:59.836436+00:00 Debian Importer Affected by VCID-c2s2-wsy6-sufn https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-08T18:41:05.091369+00:00 Debian Importer Affected by VCID-c2s2-wsy6-sufn https://security-tracker.debian.org/tracker/data/json 38.1.0