Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.uima/uimaj-core@3.0.0
purl pkg:maven/org.apache.uima/uimaj-core@3.0.0
Next non-vulnerable version 3.0.1
Latest non-vulnerable version 3.5.0
Risk
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-58fr-28tp-v7cx
Aliases:
CVE-2017-15691
GHSA-wp2f-hrg2-3r5m
Improper Restriction of XML External Entity Reference This vulnerability relates to an XML external entity expansion (XXE) capability of various XML parsers. UIMA as part of its configuration and operation may read XML from various sources, which could be tainted in ways to cause inadvertent disclosure of local files or other internal content.
3.0.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-02T04:37:40.385906+00:00 GitLab Importer Affected by VCID-58fr-28tp-v7cx https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.uima/uimaj-core/CVE-2017-15691.yml 38.6.0