cn.bee-cloud:beecloud-service-wechat (>=6.1.12b, <=6.2.09), cn.chiship.sdk:chiship-sdk-pay (>=1.1.4, <=2.7.1) +18 more potentially affected by CVE-2018-13439 via com.github.wxpay:wxpay-sdk (0.0.3)

com.github.wxpay:wxpay-sdk MAVEN version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.wxpay:wxpay-sdk and may be impacted: - cn.bee-cloud:beecloud-service-wechat =6.1.12b, =1.1.4, =4.20.0, =1.1.3, =0.1, =0.0.1.release, =0.0.1.releas...

CVE-2018-13439

WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL...