Vulnerability	Vulnerable Version
M Insecure Default Variable Initialization Affected versions of this package are vulnerable to Insecure Default Variable Initialization in the `TransformerFactory` class, which allows execution of extension functions by default, when processing XSLT stylesheets. Most uses of the vulnerable package will be in testing of internal and trusted XML-handling code, and not performing XSLT transformations, so this vulnerability is unlikely to be exposed by an application. How to fix Insecure Default Variable Initialization? Upgrade `org.xmlunit:xmlunit-core` to version 2.10.0 or higher.	[,2.10.0)

Insecure Default Variable Initialization

Affected versions of this package are vulnerable to Insecure Default Variable Initialization in the TransformerFactory class, which allows execution of extension functions by default, when processing XSLT stylesheets.

Most uses of the vulnerable package will be in testing of internal and trusted XML-handling code, and not performing XSLT transformations, so this vulnerability is unlikely to be exposed by an application.

How to fix Insecure Default Variable Initialization?

Upgrade org.xmlunit:xmlunit-core to version 2.10.0 or higher.

[,2.10.0)

Go back to all versions of this package