Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (1)
| Vulnerability |
Summary |
Aliases |
|
VCID-h83r-z7yt-pbhr
|
Improper Restriction of XML External Entity Reference
In DiffPlug Spotless, the XML parser would resolve external entities over both HTTP and HTTPS and ignores the `resolveExternalEntities` setting. This could allow disclosure of file contents to a MITM attacker, if a victim performs a `spotlessApply` operation on an untrusted XML file.
|
CVE-2019-9843
GHSA-7v35-qwwj-p98g
|