VYPR

Maven package

net.sourceforge.htmlunit/htmlunit

pkg:maven/net.sourceforge.htmlunit/htmlunit

Vulnerabilities (2)

  • CVE-2023-26119Apr 3, 2023
    affected < 3.0.0fixed 3.0.0

    Versions of the package net.sourceforge.htmlunit:htmlunit from 0 and before 3.0.0 are vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the attacker’s webpage.

  • CVE-2020-5529Feb 11, 2020
    affected < 2.37.0fixed 2.37.0

    HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute arbitrary Java code on the application. Moreover, when embedded in Android application, Android-specific initialization of