~ / search / GHSA-gp32-7h29-rpxm

GHSA-gp32-7h29-rpxm

Moderate severity vulnerability that affects com.puppycrawl.tools:checkstyle

Source: GitHub Advisory Database (reviewed) Moderate CVE-2019-9658

Packages

EcosystemPackageAffectedFixed in
Maven com.puppycrawl.tools:checkstyle < 8.18 8.18

Details

As written in the advisory (Markdown source, shown as plain text).

Checkstyle prior to 8.18 loads external DTDs by default, which can potentially lead to denial of service attacks or the leaking of confidential information.

References

External links from the advisory. They lead to third-party sites.