Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
ECHO-daf9-dd14-1871
See a problem?
Import Source
https://advisory.echohq.com/osv/ECHO-daf9-dd14-1871.json
JSON Data
https://api.osv.dev/v1/vulns/ECHO-daf9-dd14-1871
Upstream
CVE-2026-24400
GHSA-rqfh-9r24-8c9r
Published
2026-01-26T21:31:41Z
Modified
2026-11-12T08:20:29Z
Summary
[none]
Details
References
https://advisory.echohq.com/cve/CVE-2026-24400
https://github.com/assertj/assertj/security/advisories/GHSA-rqfh-9r24-8c9r
https://github.com/assertj/assertj/commit/85ca7eb6609bb179c043b85ae7d290523b1ba79a
https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html
https://github.com/assertj/assertj/releases/tag/assertj-build-3.27.7
https://nvd.nist.gov/vuln/detail/CVE-2026-24400
https://github.com/advisories/GHSA-rqfh-9r24-8c9r
Affected packages
Echo:Maven
/
org.assertj:assertj-core
Package
Name
org.assertj:assertj-core
Purl
pkg:maven/org.assertj/assertj-core
Affected ranges
Type
ECOSYSTEM
Events
Introduced
1.4.0
Fixed
3.5.2+echo.1
Type
ECOSYSTEM
Events
Introduced
3.27.6
Fixed
3.27.6+echo.1
Database specific
source
"https://advisory.echohq.com/osv/ECHO-daf9-dd14-1871.json"
ECHO-daf9-dd14-1871 - OSV