← All advisories

Critical severity9.8NVD Advisory· Published Mar 3, 2022· Updated Jun 17, 2026

CVE-2022-0265

CVE-2022-0265

Description

Improper Restriction of XML External Entity Reference in GitHub repository hazelcast/hazelcast in 5.1-BETA-1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
com.hazelcast:hazelcastMaven	>= 5.1-beta1, < 5.1	5.1

Affected products

2

ghsa-coords
pkg:maven/com.hazelcast/hazelcast
Range: >= 5.1-beta1, < 5.1
Hazelcast/Hazelcastcpe-rescue
Range: 5.1-BETA-1

Patches

Vulnerability mechanics

References

5

github.com/hazelcast/hazelcast/commit/4d6b666cd0291abd618c3b95cdbb51aa4208e748nvdPatchThird Party AdvisoryWEB
huntr.dev/bounties/d63972a2-b910-480a-a86b-d1f75d24d563nvdExploitIssue TrackingPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-99wh-973f-779pghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-0265ghsaADVISORY
github.com/hazelcast/hazelcast/pull/20407ghsaWEB

News mentions

0

No linked articles in our index yet.