dom4j:dom4j vulnerabilities (Root)

2 vulnerabilities.

• dom4j:dom4j Root dom4j allows External Entities by default which might enable XXE attacks CVE-2020-10683 Fix available 9.8 CriticalApril 29, 2020
• dom4j:dom4j Root Dom4j contains a XML Injection vulnerability CVE-2018-1000632 Fix available 7.5 HighAugust 20, 2018