2 matches found
XML External Entity (XXE) Injection
Overview com.puppycrawl.tools:checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. Affected versions of this package are vulnerable to XML External Entity XXE Injection due to an incomplete fix for CVE-2019-9658 checkstyle was still vulnerable to...
GHSA-4W88-RJJ3-X7WP Chromium Remote Code Execution in electron
Affected versions of ElectronJS are susceptible to a remote code execution vulnerability that occurs when an affected application access remote content, even if the sandbox option is enabled. Recommendation Update to electron version 1.7.8 or later...