VulnerableCode Package Details - pkg:maven/org.springframework/spring-oxm@4-alpha0

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:maven/org.springframework/spring-oxm@4-alpha0

purl	pkg:maven/org.springframework/spring-oxm@4-alpha0
Tags	Ghost

Next non-vulnerable version	4.2.9.RELEASE
Latest non-vulnerable version	5.2.9.RELEASE
Risk	4.0

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-r384-aque-vqcw Aliases: CVE-2014-0225 GHSA-f93f-g33r-8pcp	When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by default the resolution of URI references in a DTD declaration. This enabled an XXE attack.	4.0.5.RELEASE Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-01T12:47:14.782096+00:00	GitLab Importer	Affected by	VCID-r384-aque-vqcw	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework/spring-oxm/CVE-2014-0225.yml	38.0.0