CVE-2026-24400

CVE-2026-24400 affects AssertJ: up to 3.27.7 contains an XXE risk in XmlStringPrettyFormatter.toXmlDocument(String) used by isXmlEqualTo(CharSequence) and xmlPrettyFormat(String). Versions before 3.27.7 are vulnerable if untrusted XML is processed, potentially enabling local file disclosure (file...