The Apache POI team is pleased to announce the release of XMLBeans 4.0.0. XML external entity attack 16 October 2020 - XMLBeans 4.0.0 available This issue was fixed a few years ago but on review, we decided we should have a CVEĪffected users are advised to update to Apache XMLBeans 3.0.0 or above When parsing XML files using XMLBeans 2.6.0 or below, the underlying parserĬreated by XMLBeans could be susceptible to XML External Entity (XXE) attacks. 13 January 2021 - CVE-2021-23926 - XML External Entity (XXE) Processing in Apache XMLBeans versions prior to 3.0.0
POI requires Java 8 or newer since version 4.0.1. People interested should also follow the dev list to track progress. Several dependencies were also updated to their latest versions to pick up security fixes and other improvements.Ī full list of changes is available in the change log. Various rendering fixes in the Common SL/EMF modules. The Apache POI team is pleased to announce the release of 5.0.0.
0 kommentar(er)
