Description
AndroidSVG version 1.2.2 is vulnerable to XXE attacks in the SVG parsing component resulting in denial of service and possibly remote code execution
Remediation
References
https://github.com/BigBadaboom/androidsvg/issues/122
Related Vulnerabilities
CVE-2020-7656 Vulnerability in maven package org.webjars.npm:jquery
CVE-2022-36127 Vulnerability in npm package skywalking-backend-js
CVE-2023-0410 Vulnerability in npm package @builder.io/qwik
CVE-2019-9658 Vulnerability in maven package com.puppycrawl.tools:checkstyle
CVE-2021-43306 Vulnerability in maven package org.webjars.npm:jquery-validation