XML External Entity (XXE)

detekt-core is vulnerable to XML external entity attacks. The vulnerability exists in the read function in BaselineFormat.kt due to improper validation which allows an attacker to submit a malicious XML document...

com.github.ozsie:detekt-maven-plugin (>=1.0.0-rc14, <=1.19.1), com.smyachenkov:run-detekt-maven-plugin (>=1.4.0.2, <=1.9.1) +11 more potentially affected by CVE-2022-0272 via io.gitlab.arturbosch.detekt:detekt-core (>=1.0.0.rc7-3, <=1.20.0-rc2)

io.gitlab.arturbosch.detekt:detekt-core MAVEN version =1.0.0.rc7-3, =1.0.0-rc14, =1.4.0.2, =1.0.0, =0.9.4, =0.9.6, =0.3.0, =0.3.0, =1.0.0.rc7-3, =1.0.0.rc7-3, =1.0.0.rc7-3, =1.0.0.rc7-3, =2.2.0, =2.6.0 Source cves: CVE-2022-0272 Source advisory: OSV:GHSA-2CFC-865J-GM4W...

com.github.ozsie:detekt-maven-plugin (>=1.0.0-rc14, <=1.19.1), com.smyachenkov:run-detekt-maven-plugin (>=1.4.0.2, <=1.9.1) +11 more potentially affected by CVE-2022-0272 via io.gitlab.arturbosch.detekt:detekt-core (>=1.0.0.rc7-3, <=1.20.0-rc2)

io.gitlab.arturbosch.detekt:detekt-core MAVEN version =1.0.0.rc7-3, =1.0.0-rc14, =1.4.0.2, =1.0.0, =0.9.4, =0.9.6, =0.3.0, =0.3.0, =1.0.0.rc7-3, =1.0.0.rc7-3, =1.0.0.rc7-3, =1.0.0.rc7-3, =2.2.0, =2.6.0 Source cves: CVE-2022-0272 Source advisory: GHSA-2CFC-865J-GM4W...

com.github.ozsie:detekt-maven-plugin (>=1.0.0-rc14, <=1.19.1), com.smyachenkov:run-detekt-maven-plugin (>=1.4.0.2, <=1.9.1) +11 more potentially affected by CVE-2022-0272 via io.gitlab.arturbosch.detekt:detekt-core (>=1.0.0.rc7-3, <=1.20.0-rc2)

io.gitlab.arturbosch.detekt:detekt-core MAVEN version =1.0.0.rc7-3, =1.0.0-rc14, =1.4.0.2, =1.0.0, =0.9.4, =0.9.6, =0.3.0, =0.3.0, =1.0.0.rc7-3, =1.0.0.rc7-3, =1.0.0.rc7-3, =1.0.0.rc7-3, =2.2.0, =2.6.0 Source cves: CVE-2022-0272 Source advisory: MEND:CVE-2022-0272...