Product

org.xmlunit/xmlunit-core vulnerabilities

1 published CVE affecting org.xmlunit/xmlunit-core, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest org.xmlunit/xmlunit-core CVEs

Newest publication first

CVE-2024-31573 XMLUnit for Java has Insecure Defaults when Processing XSLT Stylesheets
Published 2025-10-17

MediumCVSS 4.0

XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet (used for an XSLT transformation), because XSLT extension functions are enabled.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

org.xmlunit/xmlunit-core vulnerabilities

Latest org.xmlunit/xmlunit-core CVEs

CVE-2024-31573 XMLUnit for Java has Insecure Defaults when Processing XSLT Stylesheets