Homepage

xalan-j2 vulnerabilities

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the xalan-j2 package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free
VulnerabilityVulnerable Version
  • M
Resource Exhaustion

<0:2.7.1-38.module+el8.10.0+20993+d0f024b0
  • M
Sensitive Information Uncleared Before Release

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Cross-site Scripting (XSS)

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Cross-site Scripting (XSS)

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Cross-site Scripting (XSS)

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Cross-site Scripting (XSS)

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Cross-site Scripting (XSS)

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Cross-site Scripting (XSS)

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Cross-site Scripting (XSS)

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Cross-site Scripting (XSS)

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Improper Input Validation

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Deserialization of Untrusted Data

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Static Code Injection

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Deserialization of Untrusted Data

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Deserialization of Untrusted Data

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Deserialization of Untrusted Data

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Static Code Injection

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Deserialization of Untrusted Data

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Cross-site Scripting (XSS)

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
HTTP Request Smuggling

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Cross-site Scripting (XSS)

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Cross-site Scripting (XSS)

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Improper Input Validation

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Improper Certificate Validation

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Cross-site Scripting (XSS)

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Cross-site Scripting (XSS)

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • H
Deserialization of Untrusted Data

<0:2.7.1-38.module+el8.0.0+3892+c903d3f0
  • H
Race Condition

<0:2.7.1-38.module+el8.0.0+3248+9d514f3b
  • H
Improper Input Validation

<0:2.7.1-38.module+el8.0.0+3248+9d514f3b
  • H
Improper Access Control

<0:2.7.1-38.module+el8.0.0+3248+9d514f3b
  • H
Resource Injection

<0:2.7.1-38.module+el8.0.0+3248+9d514f3b
  • M
Deserialization of Untrusted Data

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Deserialization of Untrusted Data

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Deserialization of Untrusted Data

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Deserialization of Untrusted Data

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Deserialization of Untrusted Data

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Deserialization of Untrusted Data

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c
  • M
Improper Authorization

<0:2.7.1-38.module+el8.1.0+3366+6dfb954c