GHSA-gp32-7h29-rpxm

Suggest an improvement
Source
https://github.com/advisories/GHSA-gp32-7h29-rpxm
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2019/03/GHSA-gp32-7h29-rpxm/GHSA-gp32-7h29-rpxm.json
JSON Data
https://api.test.osv.dev/v1/vulns/GHSA-gp32-7h29-rpxm
Aliases
Published
2019-03-14T15:39:14Z
Modified
2024-03-14T05:30:50.206855Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
Moderate severity vulnerability that affects com.puppycrawl.tools:checkstyle
Details

Checkstyle prior to 8.18 loads external DTDs by default, which can potentially lead to denial of service attacks or the leaking of confidential information.

Database specific 
{
    "cwe_ids": [
        "CWE-611"
    ],
    "github_reviewed_at": "2020-06-16T21:37:44Z",
    "nvd_published_at": null,
    "github_reviewed": true,
    "severity": "MODERATE"
}
References

Affected packages

Maven / com.puppycrawl.tools:checkstyle

Package

Name
com.puppycrawl.tools:checkstyle
View open source insights on deps.dev
Purl
pkg:maven/com.puppycrawl.tools/checkstyle

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.18

Affected versions

5.*

5.2
5.3
5.4
5.5
5.6
5.7
5.8
5.9

6.*

6.0
6.1
6.1.1
6.2
6.3
6.4
6.4.1
6.5
6.6
6.7
6.8
6.8.1
6.8.2
6.9
6.10
6.10.1
6.11
6.11.1
6.11.2
6.12
6.12.1
6.13
6.14
6.14.1
6.15
6.16
6.16.1
6.17
6.18
6.19

7.*

7.0
7.1
7.1.1
7.1.2
7.2
7.3
7.4
7.5
7.5.1
7.6
7.6.1
7.7
7.8
7.8.1
7.8.2

8.*

8.0
8.1
8.2
8.3
8.4
8.5
8.6
8.7
8.8
8.9
8.10
8.10.1
8.11
8.12
8.13
8.14
8.15
8.16
8.17