Assertj

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-24400 Jan 26, 23:16 Maven CRITICAL PATCH Act Now

XXE (XML External Entity) injection in AssertJ Java testing library from 1.4.0 to before 3.27.7 allows reading arbitrary files when parsing XML assertions. Patch available.

Denial Of Service Java SSRF XXE Red Hat +2

NVD GitHub VulDB

CVSS 3.1

9.1

EPSS

0.0%

CVE-2026-24400 Maven

EPSS 0% CVSS 9.1

CRITICAL PATCH Act Now

XXE (XML External Entity) injection in AssertJ Java testing library from 1.4.0 to before 3.27.7 allows reading arbitrary files when parsing XML assertions. Patch available.

Denial Of Service Java SSRF +4

NVD GitHub VulDB