llorllale / youtrack-api

Fluent, object-oriented Java wrapper for YouTrack's REST API.
https://llorllale.github.io/youtrack-api
Other
12 stars 0 forks source link

Security Alert for checkstyle #249

Open llorllale opened 5 years ago

llorllale commented 5 years ago

CVE-2019-9658

Vulnerable versions: < 8.18 Patched version: 8.18

Checkstyle prior to 8.18 loads external DTDs by default, which can potentially lead to denial of service attacks or the leaking of confidential information.