Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

apache/maven-doxia

              master @ 1385d58
            

Fixes

CVEs

HIGH

Peak severity

50.0%

Coverage

Highlights

XXE: 2 prior fixes. Scrutinize any change in this area.

doxia-core/src/main/java/org/apache/maven/doxia/parser/AbstractXmlParser.java: most-fixed (1 issue). Treat as high-risk during review.

2 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

XXE: Secure SAXParserFactory configuration is essential to prevent external entity and DTD processing, which can lead to file disclosure or SSRF.

XXE: Entity resolution must be restricted to trusted classpath resources; otherwise arbitrary file/URL access via system IDs enables XXE and SSRF.

Reflected XSS: Unescaped titles in generated XDoc output can lead to reflected XSS when rendered in browsers.