GHSA-g556-x5vx-qh59
Android SVG vulnerable to XML External Entity (XXE)
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | com.caverock:androidsvg | < 1.3 | 1.3 |
Details
As written in the advisory (Markdown source, shown as plain text).
AndroidSVG version 1.2.2 is vulnerable to XXE attacks in the SVG parsing component resulting in denial of service and possibly remote code execution
References
External links from the advisory. They lead to third-party sites.