{"id":"CVE-2021-33813","aliases":["AZL-44931","BIT-solr-2021-33813","CLSA-2025-1766621307","CLSA-2026-1768781325","CLSA-2026-1771891818","CLSA-2026-1778633131","DEBIAN-CVE-2021-33813","DLA-2696-1","DLA-2712-1","EUVD-2021-1429","GHSA-2363-cqg2-863c","MGASA-2021-0381","OESA-2022-1630","ROOT-APP-MAVEN-CVE-2021-33813","SUSE-SU-2021:2293-1","SUSE-SU-2022:3547-1","SUSE-SU-2024:1871-1","SUSE-SU-2024:1874-1","UBUNTU-CVE-2021-33813","openSUSE-SU-2021:1031-1","openSUSE-SU-2021:2293-1","openSUSE-SU-2024:10877-1","openSUSE-SU-2024:13180-1"],"status":"published","title":"XML External Entity (XXE) Injection in JDOM","description":"An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.19442,"percentile":0.97406,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-611"],"published":"2021-06-16T11:18:14Z","modified":"2026-11-04T02:45:49Z","fixes":[{"ecosystem":"Maven","package":"org.jdom:jdom2","fixed_in":["2.0.6.1"],"sources":["ghsa","osv"]},{"ecosystem":"Bitnami","package":"solr","fixed_in":["8.8.2","8.9.1"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.jdom:jdom","fixed_in":["1.1.3-tuxcare.1"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"jdom:jdom","fixed_in":["1.0-tuxcare.1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libjdom1-java","fixed_in":["1.1.3-2.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libjdom1-java","fixed_in":["1.1.3-2.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libjdom1-java","fixed_in":["1.1.3-2.1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libjdom2-java","fixed_in":["2.0.6-2.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libjdom2-java","fixed_in":["2.0.6-2.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libjdom2-java","fixed_in":["2.0.6-2.1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"libjdom2-java","fixed_in":["2.0.6-1+deb9u1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"libjdom1-java","fixed_in":["1.1.3-1+deb9u1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"jdom2","fixed_in":["2.0.6-10.1.mga8"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"jdom","fixed_in":["1.1.3-14.1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"jdom2","fixed_in":["2.0.6-15.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"jdom2","fixed_in":["2.0.6-16.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"jdom2","fixed_in":["2.0.6-15.oe2203"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"org.jdom:jdom2","fixed_in":["2.0.6-aikido.1"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"io.root.org.jdom:jdom2","fixed_in":["2.0.6-root.io.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"jdom2","fixed_in":["2.0.6-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"jdom2","fixed_in":["2.0.6-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"jdom","fixed_in":["1.1-150000.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"jdom","fixed_in":["1.1-150000.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"jdom","fixed_in":["1.1-150000.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"jdom","fixed_in":["1.1-150000.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"jdom","fixed_in":["1.1-150000.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"jdom","fixed_in":["1.1-150000.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"jdom","fixed_in":["1.1-150000.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"jdom","fixed_in":["1.1-150000.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"jdom","fixed_in":["1.1-150000.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"jdom","fixed_in":["1.1-150000.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"jdom","fixed_in":["1.1.3-26.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"objectweb-asm","fixed_in":["9.7-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"objectweb-asm","fixed_in":["9.7-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"dom4j","fixed_in":["2.1.4-150200.12.10.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"hamcrest","fixed_in":["2.2-150200.12.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"jaxen","fixed_in":["2.0.0-150200.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"jdom","fixed_in":["1.1.3-150200.12.8.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"junit","fixed_in":["4.13.2-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"xom","fixed_in":["1.3.9-150200.5.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"dom4j","fixed_in":["2.1.4-150200.12.10.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"hamcrest","fixed_in":["2.2-150200.12.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"jaxen","fixed_in":["2.0.0-150200.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"jdom","fixed_in":["1.1.3-150200.12.8.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"junit","fixed_in":["4.13.2-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"xom","fixed_in":["1.3.9-150200.5.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"apiguardian","fixed_in":["1.1.2-150200.3.10.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"assertj-core","fixed_in":["3.25.3-150200.5.4.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"byte-buddy","fixed_in":["1.14.16-150200.5.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"jopt-simple","fixed_in":["5.0.4-150200.3.4.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"junit5","fixed_in":["5.10.2-150200.3.10.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"junit5-minimal","fixed_in":["5.10.2-150200.3.10.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"open-test-reporting","fixed_in":["0.1.0~M2-150200.5.7.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"dom4j","fixed_in":["2.1.4-150200.12.10.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"jaxen","fixed_in":["2.0.0-150200.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"jdom","fixed_in":["1.1.3-150200.12.8.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"objectweb-asm","fixed_in":["9.7-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"xom","fixed_in":["1.3.9-150200.5.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"dom4j","fixed_in":["2.1.4-150200.12.10.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"hamcrest","fixed_in":["2.2-150200.12.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"jaxen","fixed_in":["2.0.0-150200.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"jdom","fixed_in":["1.1.3-150200.12.8.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"junit","fixed_in":["4.13.2-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"objectweb-asm","fixed_in":["9.7-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"xom","fixed_in":["1.3.9-150200.5.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"dom4j","fixed_in":["2.1.4-150200.12.10.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"hamcrest","fixed_in":["2.2-150200.12.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"jaxen","fixed_in":["2.0.0-150200.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"jdom","fixed_in":["1.1.3-150200.12.8.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"junit","fixed_in":["4.13.2-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"objectweb-asm","fixed_in":["9.7-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"xom","fixed_in":["1.3.9-150200.5.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"dom4j","fixed_in":["2.1.4-150200.12.10.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"hamcrest","fixed_in":["2.2-150200.12.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"jaxen","fixed_in":["2.0.0-150200.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"jdom","fixed_in":["1.1.3-150200.12.8.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"junit","fixed_in":["4.13.2-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"objectweb-asm","fixed_in":["9.7-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"xom","fixed_in":["1.3.9-150200.5.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"dom4j","fixed_in":["2.1.4-150200.12.10.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"hamcrest","fixed_in":["2.2-150200.12.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"jaxen","fixed_in":["2.0.0-150200.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"jdom","fixed_in":["1.1.3-150200.12.8.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"junit","fixed_in":["4.13.2-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"objectweb-asm","fixed_in":["9.7-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"xom","fixed_in":["1.3.9-150200.5.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"dom4j","fixed_in":["2.1.4-150200.12.10.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"hamcrest","fixed_in":["2.2-150200.12.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"jaxen","fixed_in":["2.0.0-150200.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"jdom","fixed_in":["1.1.3-150200.12.8.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"junit","fixed_in":["4.13.2-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"objectweb-asm","fixed_in":["9.7-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"xom","fixed_in":["1.3.9-150200.5.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"dom4j","fixed_in":["2.1.4-150200.12.10.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"hamcrest","fixed_in":["2.2-150200.12.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"jaxen","fixed_in":["2.0.0-150200.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"jdom","fixed_in":["1.1.3-150200.12.8.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"junit","fixed_in":["4.13.2-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"objectweb-asm","fixed_in":["9.7-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"xom","fixed_in":["1.3.9-150200.5.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"dom4j","fixed_in":["2.1.4-150200.12.10.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"hamcrest","fixed_in":["2.2-150200.12.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"jaxen","fixed_in":["2.0.0-150200.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"jdom","fixed_in":["1.1.3-150200.12.8.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"junit","fixed_in":["4.13.2-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"objectweb-asm","fixed_in":["9.7-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"xom","fixed_in":["1.3.9-150200.5.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"dom4j","fixed_in":["2.1.4-150200.12.10.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"hamcrest","fixed_in":["2.2-150200.12.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"jaxen","fixed_in":["2.0.0-150200.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"jdom","fixed_in":["1.1.3-150200.12.8.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"junit","fixed_in":["4.13.2-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"objectweb-asm","fixed_in":["9.7-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"xom","fixed_in":["1.3.9-150200.5.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"dom4j","fixed_in":["2.1.4-150200.12.10.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"hamcrest","fixed_in":["2.2-150200.12.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"jaxen","fixed_in":["2.0.0-150200.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"jdom","fixed_in":["1.1.3-150200.12.8.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"junit","fixed_in":["4.13.2-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"objectweb-asm","fixed_in":["9.7-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"xom","fixed_in":["1.3.9-150200.5.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"dom4j","fixed_in":["2.1.4-150200.12.10.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"hamcrest","fixed_in":["2.2-150200.12.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"jaxen","fixed_in":["2.0.0-150200.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"jdom","fixed_in":["1.1.3-150200.12.8.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"junit","fixed_in":["4.13.2-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"objectweb-asm","fixed_in":["9.7-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"xom","fixed_in":["1.3.9-150200.5.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"objectweb-asm","fixed_in":["9.7-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"objectweb-asm","fixed_in":["9.7-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"dom4j","fixed_in":["2.1.4-150200.12.10.2"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"hamcrest","fixed_in":["2.2-150200.12.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"jaxen","fixed_in":["2.0.0-150200.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"jdom","fixed_in":["1.1.3-150200.12.8.2"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"junit","fixed_in":["4.13.2-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"objectweb-asm","fixed_in":["9.7-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"xom","fixed_in":["1.3.9-150200.5.3.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"apiguardian","fixed_in":["1.1.2-150200.3.10.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"assertj-core","fixed_in":["3.25.3-150200.5.4.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"byte-buddy","fixed_in":["1.14.16-150200.5.7.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"dom4j","fixed_in":["2.1.4-150200.12.10.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"hamcrest","fixed_in":["2.2-150200.12.17.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"jaxen","fixed_in":["2.0.0-150200.5.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"jdom","fixed_in":["1.1.3-150200.12.8.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"jopt-simple","fixed_in":["5.0.4-150200.3.4.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"junit","fixed_in":["4.13.2-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"junit5","fixed_in":["5.10.2-150200.3.10.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"junit5-minimal","fixed_in":["5.10.2-150200.3.10.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"objectweb-asm","fixed_in":["9.7-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"open-test-reporting","fixed_in":["0.1.0~M2-150200.5.7.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"saxpath","fixed_in":["1.0-150200.5.3.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"xom","fixed_in":["1.3.9-150200.5.3.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"apiguardian","fixed_in":["1.1.2-150200.3.10.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"assertj-core","fixed_in":["3.25.3-150200.5.4.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"byte-buddy","fixed_in":["1.14.16-150200.5.7.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"dom4j","fixed_in":["2.1.4-150200.12.10.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"hamcrest","fixed_in":["2.2-150200.12.17.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"jaxen","fixed_in":["2.0.0-150200.5.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"jdom","fixed_in":["1.1.3-150200.12.8.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"jopt-simple","fixed_in":["5.0.4-150200.3.4.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"junit","fixed_in":["4.13.2-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"junit5","fixed_in":["5.10.2-150200.3.10.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"junit5-minimal","fixed_in":["5.10.2-150200.3.10.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"objectweb-asm","fixed_in":["9.7-150200.3.15.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"open-test-reporting","fixed_in":["0.1.0~M2-150200.5.7.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"saxpath","fixed_in":["1.0-150200.5.3.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"xom","fixed_in":["1.3.9-150200.5.3.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"jdom2","fixed_in":["2.0.6-lp152.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"jdom2","fixed_in":["2.0.6-3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"jdom2","fixed_in":["2.0.6-3.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"jdom","fixed_in":["1.1.3-40.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.jdom:jdom2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6.1"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.jdom:jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.0.2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"jdom2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.0.6-29"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"solr","ranges":[{"type":"SEMVER","events":[{"introduced":"8.8.1"},{"fixed":"8.8.2"},{"introduced":"8.9.0"},{"fixed":"8.9.1"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.jdom:jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.3"},{"fixed":"1.1.3-tuxcare.1"}]}],"versions":["1.1.3"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"jdom:jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0"},{"fixed":"1.0-tuxcare.1"}]}],"versions":["1.0"]},{"source":"osv","ecosystem":"Debian:12","package":"libjdom1-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-2.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libjdom1-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-2.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libjdom1-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-2.1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libjdom2-intellij-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.6+git20180529-3"]},{"source":"osv","ecosystem":"Debian:13","package":"libjdom2-intellij-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.6+git20180529-3"]},{"source":"osv","ecosystem":"Debian:14","package":"libjdom2-intellij-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.6+git20180529-3"]},{"source":"osv","ecosystem":"Debian:12","package":"libjdom2-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-2.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libjdom2-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-2.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libjdom2-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-2.1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"libjdom2-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-1+deb9u1"}]}],"versions":["2.0.6-1"]},{"source":"osv","ecosystem":"Debian:9","package":"libjdom1-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-1+deb9u1"}]}],"versions":["1.1.3-1"]},{"source":"osv","ecosystem":"Maven","package":"org.jdom:jdom2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6.1"}]}],"versions":["0.0.2-BETA","0.0.3-BETA","0.0.4-BETA","0.0.5-BETA","0.0.6-BETA","2.0.3","2.0.4","2.0.5","2.0.6"]},{"source":"osv","ecosystem":"Maven","package":"org.jdom:jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.0.2"}]}],"versions":["1.1","1.1.2","1.1.3","2.0.0","2.0.1","2.0.2"]},{"source":"osv","ecosystem":"Mageia:8","package":"jdom2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-10.1.mga8"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-14.1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"jdom2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-15.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"jdom2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-16.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"jdom2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-15.oe2203"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"org.jdom:jdom2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-aikido.1"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"io.root.org.jdom:jdom2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-root.io.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"jdom2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"jdom2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150000.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150000.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150000.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150000.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150000.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150000.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150000.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150000.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150000.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-150000.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-26.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"objectweb-asm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.7-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"objectweb-asm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.7-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"dom4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.4-150200.12.10.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"hamcrest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2-150200.12.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"jaxen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-150200.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-150200.12.8.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"junit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.2-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"xom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.9-150200.5.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"dom4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.4-150200.12.10.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"hamcrest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2-150200.12.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"jaxen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-150200.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-150200.12.8.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"junit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.2-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"xom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.9-150200.5.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"apiguardian","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.2-150200.3.10.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"assertj-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.25.3-150200.5.4.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"byte-buddy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.16-150200.5.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"jopt-simple","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.4-150200.3.4.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"junit5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.2-150200.3.10.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"junit5-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.2-150200.3.10.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"open-test-reporting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.0~M2-150200.5.7.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"dom4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.4-150200.12.10.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"jaxen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-150200.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-150200.12.8.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"objectweb-asm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.7-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"xom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.9-150200.5.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"dom4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.4-150200.12.10.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"hamcrest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2-150200.12.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"jaxen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-150200.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-150200.12.8.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"junit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.2-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"objectweb-asm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.7-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"xom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.9-150200.5.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"dom4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.4-150200.12.10.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"hamcrest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2-150200.12.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"jaxen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-150200.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-150200.12.8.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"junit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.2-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"objectweb-asm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.7-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"xom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.9-150200.5.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"dom4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.4-150200.12.10.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"hamcrest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2-150200.12.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"jaxen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-150200.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-150200.12.8.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"junit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.2-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"objectweb-asm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.7-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"xom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.9-150200.5.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"dom4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.4-150200.12.10.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"hamcrest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2-150200.12.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"jaxen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-150200.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-150200.12.8.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"junit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.2-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"objectweb-asm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.7-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"xom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.9-150200.5.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"dom4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.4-150200.12.10.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"hamcrest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2-150200.12.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"jaxen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-150200.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-150200.12.8.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"junit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.2-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"objectweb-asm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.7-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"xom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.9-150200.5.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"dom4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.4-150200.12.10.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"hamcrest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2-150200.12.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"jaxen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-150200.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-150200.12.8.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"junit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.2-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"objectweb-asm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.7-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"xom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.9-150200.5.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"dom4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.4-150200.12.10.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"hamcrest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2-150200.12.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"jaxen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-150200.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-150200.12.8.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"junit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.2-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"objectweb-asm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.7-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"xom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.9-150200.5.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"dom4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.4-150200.12.10.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"hamcrest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2-150200.12.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"jaxen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-150200.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-150200.12.8.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"junit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.2-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"objectweb-asm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.7-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"xom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.9-150200.5.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"dom4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.4-150200.12.10.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"hamcrest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2-150200.12.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"jaxen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-150200.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-150200.12.8.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"junit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.2-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"objectweb-asm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.7-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"xom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.9-150200.5.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"dom4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.4-150200.12.10.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"hamcrest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2-150200.12.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"jaxen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-150200.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-150200.12.8.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"junit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.2-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"objectweb-asm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.7-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"xom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.9-150200.5.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"objectweb-asm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.7-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"objectweb-asm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.7-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"dom4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.4-150200.12.10.2"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"hamcrest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2-150200.12.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"jaxen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-150200.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-150200.12.8.2"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"junit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.2-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"objectweb-asm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.7-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"xom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.9-150200.5.3.3"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"apiguardian","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.2-150200.3.10.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"assertj-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.25.3-150200.5.4.3"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"byte-buddy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.16-150200.5.7.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"dom4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.4-150200.12.10.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"hamcrest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2-150200.12.17.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"jaxen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-150200.5.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-150200.12.8.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"jopt-simple","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.4-150200.3.4.3"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"junit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.2-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"junit5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.2-150200.3.10.3"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"junit5-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.2-150200.3.10.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"objectweb-asm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.7-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"open-test-reporting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.0~M2-150200.5.7.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"saxpath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-150200.5.3.3"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"xom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.9-150200.5.3.3"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"apiguardian","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.2-150200.3.10.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"assertj-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.25.3-150200.5.4.3"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"byte-buddy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.16-150200.5.7.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"dom4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.4-150200.12.10.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"hamcrest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2-150200.12.17.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"jaxen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-150200.5.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-150200.12.8.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"jopt-simple","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.4-150200.3.4.3"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"junit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.2-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"junit5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.2-150200.3.10.3"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"junit5-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.2-150200.3.10.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"objectweb-asm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.7-150200.3.15.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"open-test-reporting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.0~M2-150200.5.7.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"saxpath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-150200.5.3.3"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"xom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.9-150200.5.3.3"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libjdom1-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.2+dfsg-2build1","1.1.3-1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libjdom1-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.3-1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libjdom2-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.6-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libjdom1-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.3-1","1.1.3-2~18.04"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libjdom2-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.6-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libjdom1-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.3-2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libjdom2-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.6-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libjdom1-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.3-2.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libjdom2-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.6-2.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libjdom1-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.3-3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libjdom2-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.6.1-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libjdom1-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.3-3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libjdom2-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.6.1-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libjdom1-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.3-3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libjdom2-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.6.1-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libjdom1-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.3-3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libjdom2-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.6.1-1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"jdom2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-lp152.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"jdom2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"jdom2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-3.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"jdom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-40.1"}]}]}],"products":[{"vendor":"apache","product":"solr"},{"vendor":"apache","product":"tika"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"jdom","product":"jdom"},{"vendor":"oracle","product":"communications_messaging_server"}],"references":[{"url":"https://github.com/hunterhacker/jdom/pull/188","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","advisory","fix","web","report"]},{"url":"https://github.com/hunterhacker/jdom/releases","tags":["x_refsource_MISC","x_transferred","Release Notes","Third Party Advisory","advisory","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/06/msg00026.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.apache.org/thread.html/r9974f64723875052e02787b2a5eda689ac5247c71b827d455e5dc9a6%40%3Cissues.solr.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rbc075a4ac85e7a8e47420b7383f16ffa0af3b792b8423584735f369f%40%3Cissues.solr.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r89b3800cfabb1e773e49425e5d4239c28a659839a2eca6af3431482e%40%3Cissues.solr.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/07/msg00012.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.apache.org/thread.html/rfb7a93e40ebeb1e0068cde0bf3834dcab46bb1ef06d6424db48ed9fd%40%3Cdev.tika.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r845e987b7cd8efe610284958e997b84583f5a98d3394adc09e3482fe%40%3Cissues.solr.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r5674106135bb1a6ef57483f4c63a9c44bca85d0e2a8a05895a8f1d89%40%3Cissues.solr.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r6db397ae7281ead825338200d1f62d2827585a70797cc9ac0c4bd23f%40%3Cissues.solr.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r21c406c7ed88fe340db7dbae75e58355159e6c324037c7d5547bf40b%40%3Cissues.solr.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AH46QHE5GIMT6BL6C3GDTOYF27JYILXM/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWFVYTHGILOQXUA7U3SPOERQXL7OPSZG/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","advisory","fix","web"]},{"url":"https://alephsecurity.com/vulns/aleph-2021003","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","advisory","evidence","web","report"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","tags":["x_refsource_MISC","x_transferred","Not Applicable","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33813","tags":["web","advisory"]},{"url":"https://lists.apache.org/thread.html/r89b3800cfabb1e773e49425e5d4239c28a659839a2eca6af3431482e@%3Cissues.solr.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r9974f64723875052e02787b2a5eda689ac5247c71b827d455e5dc9a6@%3Cissues.solr.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rbc075a4ac85e7a8e47420b7383f16ffa0af3b792b8423584735f369f@%3Cissues.solr.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r21c406c7ed88fe340db7dbae75e58355159e6c324037c7d5547bf40b@%3Cissues.solr.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r5674106135bb1a6ef57483f4c63a9c44bca85d0e2a8a05895a8f1d89@%3Cissues.solr.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r6db397ae7281ead825338200d1f62d2827585a70797cc9ac0c4bd23f@%3Cissues.solr.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r845e987b7cd8efe610284958e997b84583f5a98d3394adc09e3482fe@%3Cissues.solr.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rfb7a93e40ebeb1e0068cde0bf3834dcab46bb1ef06d6424db48ed9fd@%3Cdev.tika.apache.org%3E","tags":["web"]},{"url":"https://github.com/hunterhacker/jdom/commit/dd4f3c2fc7893edd914954c73eb577f925a7d361","tags":["web"]},{"url":"https://github.com/hunterhacker/jdom/issues/189","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EWFVYTHGILOQXUA7U3SPOERQXL7OPSZG","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AH46QHE5GIMT6BL6C3GDTOYF27JYILXM","tags":["web"]},{"url":"https://github.com/hunterhacker/jdom/releases/tag/JDOM-2.0.6.1","tags":["web"]},{"url":"https://github.com/advisories/GHSA-2363-cqg2-863c"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-33813","tags":["advisory"]},{"url":"https://github.com/hunterhacker/jdom","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2021-0381.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29187","tags":["report"]},{"url":"https://www.debian.org/lts/security/2021/dla-2696","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3W33THYYFJ4Y4WPUQN66D2YC35Q6ZTRU/","tags":["web","advisory"]},{"url":"https://www.debian.org/lts/security/2021/dla-2712","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1630","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20212293-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1187446","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33813","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223547-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241871-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1225503","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241874-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1224410","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-33813","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33813","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DTKBUD75B4Z3DOB4IV4QQW7SYIOHQW5F/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-33813","description":"An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.","status":"published","published":"2021-06-16T11:18:14Z","modified":"2024-08-03T23:58:23.111Z","updated_at":"2026-11-02T14:33:10.555814Z"}],"euvd":[{"id":"EUVD-2021-1429","description":"An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.","status":"published","published":"2021-06-16T11:18:14Z","modified":"2024-08-03T23:58:23Z","updated_at":"2026-11-03T03:24:33.318275Z"}],"ghsa":[{"id":"GHSA-2363-cqg2-863c","title":"XML External Entity (XXE) Injection in JDOM","description":"An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. As a workaround, to avoid external entities being expanded, one can call `builder.setExpandEntities(false)` and they won't be expanded.","status":"published","published":"2021-07-27T19:02:56Z","modified":"2025-09-16T15:06:11Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T14:38:58.107905Z"}],"nvd":[{"id":"CVE-2021-33813","description":"An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.","status":"published","published":"2021-06-16T12:15:12.76Z","modified":"2026-06-17T03:55:15.687Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T14:06:54.892562Z"}],"osv":[{"id":"AZL-44931","title":"CVE-2021-33813 affecting package jdom2 2.0.6-29","description":"An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.","status":"published","published":"2021-06-16T12:15:12Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-05T16:41:20.321068Z"},{"id":"CVE-2021-33813","description":"An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.","status":"published","published":"2021-06-16T12:15:12.76Z","modified":"2026-11-12T10:45:07.924638303Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-07T03:07:46.119316Z"},{"id":"DEBIAN-CVE-2021-33813","description":"An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.","status":"published","published":"2021-06-16T12:15:12.76Z","modified":"2026-10-23T18:03:16.17587515Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:35.233346Z"},{"id":"GHSA-2363-cqg2-863c","title":"XML External Entity (XXE) Injection in JDOM","description":"An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. As a workaround, to avoid external entities being expanded, one can call `builder.setExpandEntities(false)` and they won't be expanded.","status":"published","published":"2021-07-27T19:02:56Z","modified":"2025-09-16T15:52:31.388959Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T15:46:33.520522Z"},{"id":"OESA-2022-1630","title":"jdom2 security update","description":"JDOM is an in-memory representation of an XML document. XML consists of elements (which have attributes), text data, 'entity' references, processing instructions, and comments. XML documents can also have a DocType declaration, Comments, and Processing Instructions before the root element.\r\n\r\nSecurity Fix(es):\r\n\r\nAn XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.(CVE-2021-33813)","status":"published","published":"2022-05-11T11:04:54Z","modified":"2026-08-18T01:16:29.695770567Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"UBUNTU-CVE-2021-33813","description":"An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.","status":"published","published":"2021-06-16T12:15:00Z","modified":"2026-10-17T12:56:20.540956248Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:27.870979Z"},{"id":"BIT-solr-2021-33813","description":"An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.","status":"published","published":"2024-03-06T11:06:10.597Z","modified":"2026-09-08T08:48:19.398709459Z","updated_at":"2026-11-02T15:28:35.111822Z"},{"id":"CLSA-2025-1766621307","title":"TuxCare security update for org.jdom:jdom (1 CVE)","description":"TuxCare rebuilt org.jdom:jdom to address 1 CVE. Fixed in 1.1.3-tuxcare.1.","status":"published","published":"2026-08-04T14:52:06Z","modified":"2026-11-02T19:45:12.292406264Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1768781325","title":"TuxCare security update for io.rsocket (1 CVE)","description":"TuxCare rebuilt 7 io.rsocket packages to address 1 CVE. Fixed in 1.1.3-tuxcare.1.","status":"withdrawn","published":"2026-08-04T14:52:07Z","modified":"2026-10-26T13:21:31Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1771891818","title":"TuxCare security update for jdom:jdom (1 CVE)","description":"TuxCare rebuilt jdom:jdom to address 1 CVE. Fixed in 1.0-tuxcare.1.","status":"published","published":"2026-08-04T14:52:07Z","modified":"2026-10-15T09:46:18.211355241Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1778633131","title":"TuxCare security update for org.apache.xmlgraphics:fop (1 CVE)","description":"TuxCare rebuilt org.apache.xmlgraphics:fop to address 1 CVE. Fixed in 1.0-tuxcare.1.","status":"withdrawn","published":"2026-08-04T14:52:31Z","modified":"2026-10-26T13:21:31Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"DLA-2696-1","title":"libjdom2-java - security update","status":"published","published":"2021-06-29T00:00:00Z","modified":"2026-03-09T01:20:56.507636Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DLA-2712-1","title":"libjdom1-java - security update","status":"published","published":"2021-07-20T00:00:00Z","modified":"2026-03-09T01:22:06.603797Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"MGASA-2021-0381","title":"Updated jdom/jdom2 packages fix a security vulnerability","description":"An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a\ndenial of service via a crafted HTTP request (CVE-2021-33813).\n","status":"published","published":"2021-07-27T20:21:53Z","modified":"2026-04-16T04:44:13.908214529Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2021:1031-1","title":"Security update for jdom2","description":"This update for jdom2 fixes the following issues:\n\n- CVE-2021-33813: XXE issue in SAXBuilder can cause a denial of service via a crafted HTTP request (bsc#1187446)\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2021-07-13T09:45:14Z","modified":"2026-02-04T03:26:41.958984Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2021:2293-1","title":"Security update for jdom2","description":"This update for jdom2 fixes the following issues:\n\n- CVE-2021-33813: XXE issue in SAXBuilder can cause a denial of service via a crafted HTTP request (bsc#1187446)\n","status":"published","published":"2021-07-12T06:26:40Z","modified":"2026-02-04T02:56:54.566533Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2024:10877-1","title":"jdom2-2.0.6-3.2 on GA media","description":"These are all security issues fixed in the jdom2-2.0.6-3.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:33:18.546225Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:13180-1","title":"jdom-1.1.3-40.1 on GA media","description":"These are all security issues fixed in the jdom-1.1.3-40.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:35:25.109012Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"ROOT-APP-MAVEN-CVE-2021-33813","title":"CVE-2021-33813 in org.jdom:jdom2 - Patched by Root","description":"Root has patched CVE-2021-33813 in the org.jdom:jdom2 package for Root:Maven. Multiple fixed versions available.","status":"published","published":"2026-09-22T13:18:25Z","modified":"2026-09-22T14:18:29.828999234Z","updated_at":"2026-11-02T15:53:27.066589Z"},{"id":"SUSE-SU-2021:2293-1","title":"Security update for jdom2","description":"This update for jdom2 fixes the following issues:\n\n- CVE-2021-33813: XXE issue in SAXBuilder can cause a denial of service via a crafted HTTP request (bsc#1187446)\n","status":"published","published":"2021-07-12T06:26:36Z","modified":"2026-02-04T03:32:49.126218Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2022:3547-1","title":"Security update for jdom","description":"This update for jdom fixes the following issues:\n\n  - CVE-2021-33813: Fixed XXE issue in SAXBuilder can cause a denial of service via a crafted HTTP request (bsc#1187446).\n\n","status":"published","published":"2022-10-25T07:23:13Z","modified":"2026-02-04T04:33:27.155696Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2024:1871-1","title":"Security update for jdom","description":"This update for jdom fixes the following issues:\n\n- CVE-2021-33813: Fixed possible denial-of-service XXE issue in SAXBuilder via a crafted HTTP request (bsc#1187446).\n","status":"published","published":"2024-05-30T14:30:17Z","modified":"2026-02-04T03:42:34.406724Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1874-1","title":"Security update for Java","description":"This update for Java fixes thefollowing issues:\n\napiguardian was updated to vesion 1.1.2:\n\n- Added LICENSE/NOTICE to the generated jar\n- Allow @API to be declared at the package level\n- Explain usage of Status.DEPRECATED\n- Include OSGi metadata in manifest\n\nassertj-core was implemented at version 3.25.3:\n\n- New package implementation needed by Junit5\n\nbyte-buddy was updated to version v1.14.16:\n\n- `byte-buddy` is required by `assertj-core`\n- Changes in version v1.14.16:\n\n  * Update ASM and introduce support for Java 23.\n\n- Changes in version v1.14.15:\n\n  * Allow attaching from root on J9.\n\n- Changes of v1.14.14:\n\n  * Adjust type validation to accept additional names that are\n    legal in the class file format.\n  * Fix dynamic attach on Windows when a service user is active.\n  * Avoid failure when using Android's strict mode.\n\ndom4j was updated to version 2.1.4:\n\n- Improvements and potentially breaking changes:\n\n  * Added new factory method org.dom4j.io.SAXReader.createDefault(). It has more secure defaults than new SAXReader(),\n    which uses system XMLReaderFactory.createXMLReader() or SAXParserFactory.newInstance().newSAXParser().\n  * If you use some optional dependency of dom4j (for example Jaxen, xsdlib etc.), you need to specify an explicit\n    dependency on it in your project. They are no longer marked as a mandatory transitive dependency by dom4j.\n  * Following SAX parser features are disabled by default in DocumentHelper.parse() for security reasons (they were\n    enabled in previous versions):\n      \n    + http://xml.org/sax/properties/external-general-entities\n    + http://xml.org/sax/properties/external-parameter-entities\n\n- Other changes:\n\n  * Do not depend on jtidy, since it is not used during build\n  * Fixed license to Plexus\n  * JPMS: Add the Automatic-Module-Name attribute to the manifest.\n  * Make a separate flavour for a minimal `dom4j-bootstrap` package used to build `jaxen` and full `dom4j`\n  * Updated pull-parser version\n  * Reuse the writeAttribute method in writeAttributes\n  * Support build on OS with non-UTF8 as default charset\n  * Gradle: add an automatic module name\n  * Use Correct License Name 'Plexus'\n  * Possible vulnerability of DocumentHelper.parseText() to XML injection\n  * CVS directories left in the source tree\n  * XMLWriter does not escape supplementary unicode characters correctly\n  * writer.writeOpen(x) doesn't write namespaces\n  * Fixed concurrency problem with QNameCache\n  * All dependencies are optional\n  * SAXReader: hardcoded namespace features\n  * Validate QNames\n  * StringIndexOutOfBoundsException in XMLWriter.writeElementContent()\n  * TreeNode has grown some generics\n  * QName serialization fix\n  * DocumentException initialize with nested exception\n  * Accidentally occurring error in a multi-threaded test\n  * Added compatibility with W3C DOM Level 3\n  * Use Java generics\n\nhamcrest:\n\n-  `hamcrest-core` has been replaced by `hamcrest` (no source changes)\n\njunit had the following change:\n\n- Require hamcrest \u003e= 2.2\n\njunit5 was updated to version 5.10.2:\n    \n- Conditional execution based on OS architectures\n- Configurable cleanup mode for @TempDir\n- Configurable thread mode for @Timeout\n- Custom class loader support for class/method selectors, @MethodSource, @EnabledIf, and @DisabledIf\n- Dry-run mode for test execution\n- Failure threshold for @RepeatedTest\n- Fixed build with the latest open-test-reporting milestone\n- Fixed dependencies in module-info.java files\n- Fixed unreported exception error that is fatal with JDK 21\n- Improved configurability of parallel execution\n- New @SelectMethod support in test @Suite classes.\n- New ConsoleLauncher subcommand for test discovery without execution\n- New convenience base classes for implementing ArgumentsProvider and ArgumentConverter\n- New IterationSelector\n- New LauncherInterceptor SPI\n- New NamespacedHierarchicalStore for use in third-party test engines\n- New TempDirFactory SPI for customizing how temporary directories are created\n- New testfeed details mode for ConsoleLauncher\n- New TestInstancePreConstructCallback extension API\n- Numerous bug fixes and minor improvements\n- Parameter injection for @MethodSource methods\n- Promotion of various experimental APIs to stable\n- Reusable parameter resolution for custom extension methods via ExecutableInvoker\n- Stacktrace pruning to hide internal JUnit calls\n- The binaries are compatible with java 1.8\n- Various improvements to ConsoleLauncher\n- XML reports in new Open Test Reporting format\n\njdom:\n\n- Security issues fixed:\n\n  * CVE-2021-33813: Fixed an XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service\n    via a crafted HTTP request (bsc#1187446)\n\n- Other changes and bugs fixed:\n    \n  * Fixed wrong entries in changelog (bsc#1224410)\n  * The packages `jaxen`, `saxpath` and `xom` are now separate standalone packages instead of being part of `jdom`\n\njaxen was implemented at version 2.0.0:\n\n- New standalone RPM package implementation, originally part of `jdom` source package\n- Classpaths are much smaller and less complex, and will suppress a lot of noise from static analysis tools.\n- The Jaxen core code is also a little smaller and has fixed a few minor bugs in XPath evaluation\n- Despite the major version bump, this should be a drop in replacement for almost every project. \n  The two major possible incompatibilities are:\n  \n  * The minimum supported Java version is now 1.5, up from 1.4 in 1.2.0 and 1.3 in 1.1.6.\n  * dom4j, XOM, and JDOM are now optional dependencies so if a project was depending on them to be loaded transitively\n    it will need to add explicit dependencies to build.\n\njopt-simple:\n\n- Included jopt-simple to Package Hub 15 SP5 (no source changes)\n\nobjectweb-asm was updated to version 9.7:\n\n- New Opcodes.V23 constant for Java 23\n- Bugs fixed\n  * Fixed unit test regression in dex2jar.\n  * Fixed 'ClassNode#outerClass' with incorrect JavaDocs.\n  * asm-bom packaging should be 'pom'.\n  * The Textifier prints a supplementary space at the end of each method that throws at least one exception.\n\n\nopen-test-reporting:\n\n- Included `open-test-reporting-events` and `open-test-reporting-schema` to the channels as they are runtime \n  dependencies of Junit5 (no source changes)\n\nsaxpath was implemented at version 1.0 FCS:\n\n- New standalone RPM package implementation, originally part of `jdom` source package (openSUSE Leap 15.5 package only)\n\nxom was implemented at version 1.3.9:\n\n- New standalone RPM package implementation, originally part of `jdom` source package\n- The Nodes and Elements classes are iterable so you can use the enhanced for loop syntax on instances of these classes.\n- The copy() method is now covariant.\n- Adds Automatic-Moduole-Name to jar\n- Remove direct dependency on xml-apis:xml-apis artifact since these classes are now available in the core runtime.\n- Eliminate usage of com.sun classes to make XOM compatible with JDK 16.\n- Replace remaining usages of StringBuffer with StringBuilder to slightly improve performance.\n","status":"published","published":"2024-05-31T03:05:31Z","modified":"2026-02-04T03:31:51.256753Z","updated_at":"2026-11-02T15:53:54.652421Z"}]}}