Description
Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0.
Remediation
References
https://github.com/detekt/detekt/commit/c965a8d2a6bbdb9bcfc6acfa7bbffd3da81f5395
https://huntr.dev/bounties/23e37ba7-96d5-4037-a90a-8c8f4a70ce44
Related Vulnerabilities
CVE-2020-11111 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind
CVE-2022-24999 Vulnerability in npm package qs
CVE-2018-11537 Vulnerability in maven package org.webjars.npm:angular-jwt
CVE-2017-18214 Vulnerability in maven package org.webjars.npm:moment
CVE-2020-7663 Vulnerability in npm package websocket-extensions