New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

io.github.classgraph vulnerability #4031

Closed

sebjulliand opened this issue Oct 1, 2021 · 1 comment

Assignees

sebjulliand commented Oct 1, 2021

The classgraph package is vulnerable to XML eXternal Entity (XXE) attacks.
See this CWE entry: Sonatype CWE 611
And the related release note: classgraph release 4.8.112

Would it be possible to update classgraph to version 4.8.112 or above?

frantuma self-assigned this

frantuma added a commit that referenced this issue


          fix #4031 - bump classpath version, solve CWE-611

03c37bf

frantuma added a commit that referenced this issue


          fix #4031 - bump classgraph version, solve CWE-611

cff5f95

frantuma added a commit that referenced this issue


          fix #4031 - bump classgraph version, solve CWE-611

275f739

frantuma closed this as completed in

f6bed82

Author

sebjulliand commented Oct 1, 2021

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment