Cyclonedx Cyclonedx-core-java vulnerabilities

• cyclonedx cyclonedx-core-java CycloneDX Core (Java): BOM validation is vulnerable to XML External Entity injection CVE-2025-64518 Fix available 7.5 HighNovember 10, 2025
• cyclonedx cyclonedx-core-java, core java +1 more Improper Restriction of XML External Entity Reference in org.cyclonedx:cyclonedx-core-java CVE-2024-38374 Fix available 7.5 HighJune 24, 2024