- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 2
- Registry
- Maven Central
Advisories 2
- CVE-2013-7315Unrated
The Spring MVC in Spring Framework before 3.2.4 and 4.0.0.M1 through 4.0.0.M2 does not disable external entity resolution for the StAX…
Affected: fixed in 3.2.4.RELEASE.
- CVE-2013-4152Unrated
The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB marshaller, does not disable entity resolution…
Affected: fixed in 3.2.4.RELEASE.