org.jvnet.hudson.plugins:checkstyle@1.17 vulnerabilities
latest version
3.12
latest non vulnerable version
first published
16 years ago
latest version published
14 years ago
licenses detected
- (BSD-2-Clause OR MIT)[1.5,2.2)
package manager
Direct Vulnerabilities
Known vulnerabilities in the org.jvnet.hudson.plugins:checkstyle package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
org.jvnet.hudson.plugins:checkstyle collects the Checkstyle analysis results of the project modules and visualizes the found warnings. Affected versions of this package are vulnerable to XML External Entity (XXE) Injection in files it parses as part of the build process. It allows attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks. How to fix XML External Entity (XXE) Injection? Upgrade | [,3.5) |