Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/libxerces2-java@2.12.2-1
purl pkg:deb/debian/libxerces2-java@2.12.2-1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-c2s2-wsy6-sufn XML Injection (aka Blind XPath Injection) There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present within XercesJ version 2.12.1 and the previous versions. CVE-2022-23437
GHSA-h65f-jvqw-m9fj

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T10:27:01.926067+00:00 Debian Importer Fixing VCID-c2s2-wsy6-sufn https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T07:02:59.840333+00:00 Debian Importer Fixing VCID-c2s2-wsy6-sufn https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-08T18:41:05.096714+00:00 Debian Importer Fixing VCID-c2s2-wsy6-sufn https://security-tracker.debian.org/tracker/data/json 38.1.0