Skip to content

Product

debian/libtwelvemonkeys-java vulnerabilities

1 published CVE affecting debian/libtwelvemonkeys-java, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest debian/libtwelvemonkeys-java CVEs

Newest publication first

  1. CVE-2021-23792 External Entity Reference in TwelveMonkeys ImageIO

    Published
    CriticalCVSS 9.8 EPSS 1.1%

    The package com.twelvemonkeys.imageio:imageio-metadata before version 3.7.1 is vulnerable to XML External Entity (XXE) Injection due to an insecurely initialized XML parser for reading XMP Metadata. An attacker can exploit this vulnerability if they are able to supply a file (e.g...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.