com.phoenixnap.oss:springmvc-raml-parser (0.9.1), com.phoenixnap.oss:springmvc-raml-plugin (0.9.1) +4 more potentially affected by CVE-2025-3588 via org.jsonschema2pojo:jsonschema2pojo-core (0.4.29)

org.jsonschema2pojo:jsonschema2pojo-core MAVEN version 0.4.29 is affected by a known vulnerability. The following packages have a transitive dependency on org.jsonschema2pojo:jsonschema2pojo-core and may be impacted: - com.phoenixnap.oss:springmvc-raml-parser 0.9.1 -...

XML External Entity (XXE)

Raml parser is vulnerable to XML external entity attacks. The attack is possible because an XML input containing a reference to an external entity is not blocked by the XML parser, allowing an attacker to inject malicious XML files to retrieve system files or perform requests on behalf of the...