XML External Entity (XXE) Injection

Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection in the createParser method of PatternParser, which sets only http://apache.org/xml/features/nonvalidating/load-external-dtd to false and leaves disallow-doctype-decl, external-general-entities,...

CVE-2026-47898 Apache Lucene.Net: XXE vulnerability in Lucene.Net.Analysis.Common PatternParser

Improper Restriction of XML External Entity Reference vulnerability in Apache Lucene.Net Lucene.Net.Analysis.Common library. This issue affects Apache Lucene.Net.Analysis.Common: from 4.8.0-beta00005 before 4.8.0-beta00018. Users are recommended to upgrade to version 4.8.0-beta00018, which fixes...

CVE-2026-47898 Apache Lucene.Net: XXE vulnerability in Lucene.Net.Analysis.Common PatternParser

Improper Restriction of XML External Entity Reference vulnerability in Apache Lucene.Net Lucene.Net.Analysis.Common library. This issue affects Apache Lucene.Net.Analysis.Common: from 4.8.0-beta00005 before 4.8.0-beta00018. Users are recommended to upgrade to version 4.8.0-beta00018, which fixes...

aspectj:ASTFuzzer: Security exception in org.aspectj.weaver.patterns.PatternParser.parseMaybeParenthesizedFieldSignatureP

Detailed Report: https://oss-fuzz.com/testcase?key=6750118671679488 Project: aspectj Fuzzing Engine: libFuzzer Fuzz Target: ASTFuzzer Job Type: libfuzzerasanaspectj Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

aspectj:ASTFuzzer: Security exception in org.aspectj.weaver.patterns.PatternParser.parseAtomicTypePattern

Detailed Report: https://oss-fuzz.com/testcase?key=6671975383433216 Project: aspectj Fuzzing Engine: libFuzzer Fuzz Target: ASTFuzzer Job Type: libfuzzerasanaspectj Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

spring-framework:AspectJExpressionPointcutFuzzer: Security exception in org.aspectj.weaver.patterns.PatternParser.parseAtomicPointcut

Project: https://github.com/spring-projects/spring-framework.git Detailed Report: https://oss-fuzz.com/testcase?key=6350062699020288 Project: spring-framework Fuzzing Engine: libFuzzer Fuzz Target: AspectJExpressionPointcutFuzzer Job Type: libfuzzerasanspring-framework Platform Id: linux Crash...

spring-framework:AspectJExpressionPointcutFuzzer: Security exception in org.aspectj.weaver.patterns.PatternParser.parseNotOrPointcut

Project: https://github.com/spring-projects/spring-framework.git Detailed Report: https://oss-fuzz.com/testcase?key=5209576781250560 Project: spring-framework Fuzzing Engine: libFuzzer Fuzz Target: AspectJExpressionPointcutFuzzer Job Type: libfuzzerasanspring-framework Platform Id: linux Crash...

spring-framework:AspectJExpressionPointcutFuzzer: Security exception in org.aspectj.weaver.patterns.PatternParser.parseNotOrTypePattern

Project: https://github.com/spring-projects/spring-framework.git Detailed Report: https://oss-fuzz.com/testcase?key=5157996564447232 Project: spring-framework Fuzzing Engine: libFuzzer Fuzz Target: AspectJExpressionPointcutFuzzer Job Type: libfuzzerasanspring-framework Platform Id: linux Crash...