← All advisories

Critical severity9.8NVD Advisory· Published Apr 21, 2022· Updated Jun 17, 2026

CVE-2022-0272

CVE-2022-0272

Description

Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
io.gitlab.arturbosch.detekt:detekt-coreMaven	< 1.20.0	1.20.0

Affected products

3

Detekt/Detekt
cpe:2.3:a:detekt:detekt:*:*:*:*:*:*:*:*
Range: <1.20.0
ghsa-coords
pkg:maven/io.gitlab.arturbosch.detekt/detekt-core
Range: < 1.20.0
Detekt/Detekt/detektv5
Range: unspecified

Patches

Vulnerability mechanics

References

4

github.com/detekt/detekt/commit/c965a8d2a6bbdb9bcfc6acfa7bbffd3da81f5395nvdPatchThird Party AdvisoryWEB
huntr.dev/bounties/23e37ba7-96d5-4037-a90a-8c8f4a70ce44nvdExploitPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-2cfc-865j-gm4wghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-0272ghsaADVISORY

News mentions

0

No linked articles in our index yet.