org.apache.maven.plugins:maven-checkstyle-plugin (2.16), org.opendaylight.yangtools:checkstyle-logging (>=0.8.0-beryllium, <=0.8.4-beryllium-sr4) potentially affected by CVE-2019-9658 via com.puppycrawl.tools:checkstyle (6.2)

com.puppycrawl.tools:checkstyle MAVEN version 6.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - org.apache.maven.plugins:maven-checkstyle-plugin 2.16 - org.opendaylight.yangtools:checkstyle-loggi...

de.dagere.kopeme:build-tools (1.0), info.novatec.ita:stereotype.check.plugin (>=2.0.3, <=2.0.5) +1 more potentially affected by CVE-2019-9658 via com.puppycrawl.tools:checkstyle (6.5)

com.puppycrawl.tools:checkstyle MAVEN version 6.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - de.dagere.kopeme:build-tools 1.0 - info.novatec.ita:stereotype.check.plugin =2.0.3, =9.0.5, =9.0.6...

com.qulice:qulice-checkstyle (>=0.6, <=0.12), com.qulice:qulice-maven-plugin (>=0.6, <=0.12) +7 more potentially affected by CVE-2019-9658 via com.puppycrawl.tools:checkstyle (5.7)

com.puppycrawl.tools:checkstyle MAVEN version 5.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - com.qulice:qulice-checkstyle =0.6, =0.6, =0.1, =2.12, =1.5.0.cr2, =0.6.2-helium, =1.1.0, =1.3.0...

GHSA-GP32-7H29-RPXM Moderate severity vulnerability that affects com.puppycrawl.tools:checkstyle

Checkstyle prior to 8.18 loads external DTDs by default, which can potentially lead to denial of service attacks or the leaking of confidential information...

org.testifyproject.buildtools:coding-conventions (0.9.1), org.xwiki.commons:xwiki-commons-tool-verification-resources (>=9.0-rc-1, <=9.0) potentially affected by CVE-2019-9658 via com.puppycrawl.tools:checkstyle (7.4)

com.puppycrawl.tools:checkstyle MAVEN version 7.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - org.testifyproject.buildtools:coding-conventions 0.9.1 -...

org.xwiki.commons:xwiki-commons-tool-verification-resources (>=7.4-milestone-2, <=7.4.6) potentially affected by CVE-2019-9658 via com.puppycrawl.tools:checkstyle (6.13)

com.puppycrawl.tools:checkstyle MAVEN version 6.13 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - org.xwiki.commons:xwiki-commons-tool-verification-resources =7.4-milestone-2, =7.4.6 Source cves:...

org.hawkular:hawkular-build-tools (>=12, <=13) potentially affected by CVE-2019-9658 via com.puppycrawl.tools:checkstyle (6.8)

com.puppycrawl.tools:checkstyle MAVEN version 6.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - org.hawkular:hawkular-build-tools =12, =13 Source cves: CVE-2019-9658 Source advisory:...

XML External Entity (XXE)

checkstyle is vulnerable to XML External Entity XXE. The vulnerability exists because it allows loading of external DTDs as a default feature, allowing an attacker to call a malicious external DTD...

CVE-2019-9658

Checkstyle before 8.18 loads external DTDs by default...

Default credentials

Checkstyle before 8.18 loads external DTDs by default...

DEBIAN-CVE-2019-9658

Checkstyle before 8.18 loads external DTDs by default...

CVE-2019-9658

Checkstyle before 8.18 loads external DTDs by default...

CVE-2019-9658

Checkstyle before 8.18 loads external DTDs by default...

UBUNTU-CVE-2019-9658

Checkstyle before 8.18 loads external DTDs by default...

CVE-2019-9658

CVE-2019-9658 affects Checkstyle (com.puppycrawl.tools:checkstyle). Multiple connected sources confirm that versions prior to 8.29 are vulnerable to XML External Entity (XXE) Injection due to an incomplete fix for CVE-2019-9658. The root cause is an incomplete/partial mitigation in the earlier fi...

CVE-2019-9658

Checkstyle before 8.18 loads external DTDs by default...

cn.com.infosec:netty-build (23), co.luminositylabs.oss:luminositylabs-config (0.0.11) +275 more potentially affected by CVE-2019-9658 via com.puppycrawl.tools:checkstyle (>=5.4, <=8.17)

com.puppycrawl.tools:checkstyle MAVEN version =5.4, =0.1.0, =0.1.0, =1.2.0-alpha2, =0.0.1, =0.1.1, =1.0.5, =1.0.0.1, =1.0.0.31 and more Source cves: CVE-2019-9658 Source advisory: MEND:CVE-2019-9658...

CVE-2019-9658

Checkstyle before 8.18 loads external DTDs by default...

CVE-2019-9658

Checkstyle before 8.18 loads external DTDs by default...

PT-2019-19782

Name of the Vulnerable Software and Affected Versions Checkstyle versions prior to 8.18 Description The issue allows Checkstyle to load external DTDs by default, which can potentially lead to denial of service attacks or the leaking of confidential information. Recommendations For versions prior ...