org.xwiki.rendering:xwiki-rendering-xml

Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.

At a glance

Ecosystem
Maven
Vulnerability status
affected by 2 advisory(ies)

Advisories (3)

AdvisoryAffected versionsLatest version
GHSA-26vp-8gxg-v4pg
org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue
< 14.10.2Affected
GHSA-663w-2xp3-5739
org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability
14.6-rc-1 – < 14.10.4Not affected
GHSA-9xc6-c2rm-f27p
XWiki vulnerable to remote code execution through insufficient protection against {{/html}} injection
< 16.10.10 ; 17.0.0-rc-1 – < 17.4.3 ; 17.5.0-rc-1 – < 17.6.0-rc-1Affected

Sources

SourceLicence