org.cyclonedx:cyclonedx-core-java vulnerabilities (Maven)

2 vulnerabilities.

• org.cyclonedx:cyclonedx-core-java Maven CycloneDX Core (Java): BOM validation is vulnerable to XML External Entity injection CVE-2025-64518 Fix available 7.5 HighNovember 10, 2025
• org.cyclonedx:cyclonedx-core-java Maven Improper Restriction of XML External Entity Reference in org.cyclonedx:cyclonedx-core-java CVE-2024-38374 Fix available 7.5 HighJune 24, 2024