XMLUnit XMLUnit for Java vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting XMLUnit XMLUnit for Java: 1 record(s), with affected versions and fixes.

CVE-2024-31573 Medium · 4.0 CWE-669 Oct 17, 2025

Incorrect Resource Transfer Between Spheres in XMLUnit XMLUnit for Java

XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet (used for an XSLT transformation), because XSLT extension functions are enabled.