de.tud.sse:soot-infoflow@2.8
latest version
2.9.0
latest non vulnerable version
first published
7 years ago
latest version published
5 years ago
licenses detected
- [2.7.1,)
package registry
Direct Vulnerabilities
Known vulnerabilities in the de.tud.sse:soot-infoflow package. This does not include vulnerabilities belonging to this package’s dependencies.
Fix vulnerabilities automatically
Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
Affected versions of this package are vulnerable to XML External Entity (XXE) Injection. This allows an attacker who has control over the source/sink definition file in XML format to read files from external locations. In order for this to occur, the XML-based format for sources and sinks has to be used and the attacker has to able control the source/sink definition file. As a workaround, do not allow untrusted entities to control the source/sink definition file. How to fix XML External Entity (XXE) Injection? Upgrade | [,2.9.0) |