Search for packages
| purl | pkg:maven/org.mustangproject/validator@2.16.3 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-f6y2-vzkw-7ybe | Mustangproject allows exfiltrating files via XXE attacks Mustang before 2.16.3 allows exfiltrating files via XXE attacks. |
CVE-2025-66372
GHSA-x832-fpvj-r5ph |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-04T17:12:50.203308+00:00 | GithubOSV Importer | Fixing | VCID-f6y2-vzkw-7ybe | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/11/GHSA-x832-fpvj-r5ph/GHSA-x832-fpvj-r5ph.json | 38.6.0 |
| 2026-06-02T04:48:58.516591+00:00 | GitLab Importer | Fixing | VCID-f6y2-vzkw-7ybe | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.mustangproject/validator/CVE-2025-66372.yml | 38.6.0 |