Description
Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0.
Remediation
References
https://github.com/detekt/detekt/commit/c965a8d2a6bbdb9bcfc6acfa7bbffd3da81f5395
https://huntr.dev/bounties/23e37ba7-96d5-4037-a90a-8c8f4a70ce44
Related Vulnerabilities
CVE-2022-24794 Vulnerability in npm package express-openid-connect
CVE-2018-1307 Vulnerability in maven package org.apache.juddi:juddi-client
CVE-2017-12647 Vulnerability in maven package com.liferay:com.liferay.knowledge.base.service
CVE-2020-15125 Vulnerability in npm package auth0
CVE-2013-2160 Vulnerability in maven package org.codehaus.woodstox:woodstox-core-asl