VulnerableCode Package Details - pkg:maven/org.apache.cocoon/cocoon-core@2.1.12

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:maven/org.apache.cocoon/cocoon-core@2.1.12

purl	pkg:maven/org.apache.cocoon/cocoon-core@2.1.12

Next non-vulnerable version	2.3.0
Latest non-vulnerable version	2.3.0
Risk	1.6

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-gven-bm92-qkam Aliases: CVE-2020-11991	Improper Restriction of XML External Entity Reference When using the StreamGenerator, the code parse a user-provided XML. A specially crafted XML, including external system entities, could be used to access any file on the server system.	2.2.0 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-06-04T16:20:24.688997+00:00	GitLab Importer	Affected by	VCID-gven-bm92-qkam	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cocoon/cocoon-core/CVE-2020-11991.yml	38.6.0