- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 2
- Registry
- Maven Central
Advisories 2
- CVE-2020-10683Unrated
dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks.
Affected: fixed in 2.0.3; from 2.1.0, fixed in 2.1.3.
- CVE-2018-1000632Unrated
dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element.
Affected: fixed in 2.0.3; from 2.1.0, fixed in 2.1.1.