Repository navigation

XML Entity Expansion vunlerable version of jersey-media-jaxb is in use #319

Closed

opened

OpenAm 14.5.4 is currently using a version of jersey-media-jaxb, 2.28, that is vulnerable to an XML Entity Expansion DOS attack

Details can be found at: https://snyk.io/vuln/SNYK-JAVA-ORGGLASSFISHJERSEYMEDIA-595972

The fix is to update to jersey 2.31 or later.

vharseko
closed this as completedin f47a767 on Dec 6, 2020
vharseko
added a commit that references this issue on Oct 29, 2026
CVE-2026-12590 CVE-2026-82417 CVE-2026-82562 CVE-2026-110816 CVE-2026…
320d0d9

to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

Labels

No labels

No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests