Vulnerability Database

300,926

Total vulnerabilities in the database

CVE-2019-10782

All versions of com.puppycrawl.tools:checkstyle before 8.29 are vulnerable to XML External Entity (XXE) Injection due to an incomplete fix for CVE-2019-9658.

Published: Jan 30, 2020
Updated: Nov 9, 2025
CVE: CVE-2019-10782
GHSA: GHSA-763g-fqq7-48wg
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 5.3
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:P/I:N/A:N

CWEs:

CWE-611

OWASP TOP 10:

A4 - XML External Entities (XXE)

Affected Software
References

Software	From	Fixed in
checkstyle / checkstyle	-	8.29
com.puppycrawl.tools / checkstyle	-	8.29

https://github.com/checkstyle/checkstyle/commit/c46a16d177e6797895b195c288ae9a9a096254b8
https://github.com/checkstyle/checkstyle/issues/7468
https://github.com/checkstyle/checkstyle/security/advisories/GHSA-763g-fqq7-48wg
https://lists.apache.org/thread.html/r8aaf4ee16bbaf6204731d4770d96ebb34b258cd79b491f9cdd7f2540@%3Ccommits.nifi.apache.org%3E
https://lists.apache.org/thread.html/r8aaf4ee16bbaf6204731d4770d96ebb34b258cd79b491f9cdd7f2540%40%3Ccommits.nifi.apache.org%3E
https://lists.debian.org/debian-lts-announce/2020/02/msg00008.html
https://snyk.io/vuln/SNYK-JAVA-COMPUPPYCRAWLTOOLS-543266

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo