spring-projects/spring-framework
Defined in 3 files
Last patched
isProcessExternalEntities in spring-projects/spring-framework was changed by 3 published CVE fixes between 2014 and 2017, in 7 distinct patches that added or removed 18 lines in total.
The name occurs in 3 files: spring-oxm/src/main/java/org/springframework/oxm/jaxb/Jaxb2Marshaller.java, spring-web/src/main/java/org/springframework/http/converter/xml/SourceHttpMessageConverter.java, spring-web/src/main/java/org/springframework/http/converter/xml/Jaxb2RootElementHttpMessageConverter.java.
spring-projects/spring-framework has 54 CVEs with a located fix in total, so 6% of them touched this function.
Every published CVE whose fix changed isProcessExternalEntities, newest first, with the lines each fix touched.
CVE-2014-0225 · spring-web/src/main/java/org/springframework/http/converter/xml/Jaxb2RootElementHttpMessageConverter.java · lines 72–75 · +4 −0
CVE-2015-3192 · spring-oxm/src/main/java/org/springframework/oxm/jaxb/Jaxb2Marshaller.java · line 436 · +1 −0
CVE-2014-0054 · spring-oxm/src/main/java/org/springframework/oxm/jaxb/Jaxb2Marshaller.java · lines 403–409 · +7 −0
CVE-2014-0054 · spring-web/src/main/java/org/springframework/http/converter/xml/SourceHttpMessageConverter.java · lines 93–98 · +6 −0
Get an alert when the next CVE fix lands in spring-projects/spring-framework, with the patched functions.
Monitor spring-framework CVEsFunctions in the same files that CVE fixes also changed.
Functions in spring-projects/spring-framework changed by the most CVE fixes.
Common questions about CVE fixes to isProcessExternalEntities.
Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.
Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.
