dom4j vulnerabilities (Debian)

2 vulnerabilities.

• dom4j Debian dom4j allows External Entities by default which might enable XXE attacks CVE-2020-10683 Fix available 9.8 CriticalApril 29, 2020
• dom4j Debian Dom4j contains a XML Injection vulnerability CVE-2018-1000632 Fix available 7.5 HighAugust 20, 2018