Pmd Project Pmd vulnerabilities

• pmd PMD Designer has Stored XSS in VBHTMLRenderer and YAHTMLRenderer via unescaped violation messages CVE-2026-28338 Fix available 6.8 MediumFebruary 27, 2026
• pmd project pmd Improper Restriction of XML External Entity Reference in PMD CVE-2019-7722 Fix available 8.1 HighFebruary 11, 2019