Security issue found in JDOM V2.0.6

Muthu kumar <[email protected]> Thu, 21 Oct 2021 17:29:27 +0530
Newsgroups gmane.comp.java.jdom.general
Message-ID <CAH=+YzP=dEddUxVgMmfQV2396rHZawMa_F-7kaOGvu-d_1qJTQ@mail.gmail.com>
--===============0434229007==
Content-Type: multipart/alternative; boundary="00000000000014d90105cedba1df"

--00000000000014d90105cedba1df
Content-Type: text/plain; charset="UTF-8"

Hi Team,

We have found below security issue wity latest release of 2.0.6

An XXE issue in SAXBuilder.

Is there any possibility to address this issue?

Also, kindly provide some information about planned future releases.

Thanks and regards
Muthu

--00000000000014d90105cedba1df
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto"><div style=3D"font-family:sans-serif;font-size:12.8px" di=
r=3D"auto"><div style=3D"width:361.091px;margin:16px 0px"><div><div dir=3D"=
auto">Hi Team,<div dir=3D"auto"><br></div><div dir=3D"auto">We have found b=
elow security issue wity latest release of 2.0.6</div><div dir=3D"auto"><br=
></div><div dir=3D"auto">An XXE issue in SAXBuilder.</div><div dir=3D"auto"=
><br></div><div dir=3D"auto">Is there any possibility to address this=C2=A0=
issue?</div><div dir=3D"auto"><br></div><div dir=3D"auto">Also, kindly prov=
ide some information about planned future releases.</div><div dir=3D"auto">=
<br></div><div dir=3D"auto">Thanks and regards</div><div style=3D"color:rgb=
(136,136,136)"><div dir=3D"auto">Muthu</div></div></div></div></div><div st=
yle=3D"height:0px"></div></div><br></div>

--00000000000014d90105cedba1df--

--===============0434229007==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
To control your jdom-interest membership:
http://www.jdom.org/mailman/options/jdom-interest/[email protected]
--===============0434229007==--