assertj-core vulnerabilities (Red Hat)

4 vulnerabilities.

• assertj-core Red Hat Plexus-Utils has a Directory Traversal vulnerability in its extractFile method CVE-2025-67030 Fix available 8.8 HighMarch 25, 2026
• assertj-core Red Hat AssertJ has XML External Entity (XXE) vulnerability when parsing untrusted XML via isXmlEqualTo assertion CVE-2026-24400 Fix available 8.2 HighJanuary 26, 2026
• assertj-core Red Hat Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default CVE-2025-48734 Public exploitFix available 8.8 HighMay 28, 2025
• assertj-core Red Hat Insecure Deserialization in Apache Commons Beanutils CVE-2019-10086 Fix available EPSS 29.1% 7.3 HighAugust 20, 2019