Description
Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0.
Remediation
References
https://github.com/detekt/detekt/commit/c965a8d2a6bbdb9bcfc6acfa7bbffd3da81f5395
https://huntr.dev/bounties/23e37ba7-96d5-4037-a90a-8c8f4a70ce44
Related Vulnerabilities
CVE-2023-29528 Vulnerability in maven package org.xwiki.commons:xwiki-commons-xml
CVE-2021-23369 Vulnerability in npm package handlebars
CVE-2022-25873 Vulnerability in maven package org.webjars.npm:vuetify
CVE-2023-36542 Vulnerability in maven package org.apache.nifi:nifi-hikari-dbcp-service
CVE-2018-9206 Vulnerability in npm package blueimp-file-upload