CyberSecBulletin

Assertj vulnerabilities

We track 1 vulnerability in Assertj products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 26, 2026.

1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score

Latest Assertj vulnerabilities

  • 9.1 Critical severity

    assertj: Improper Restriction of XML External Entity Reference

    CVE-2026-24400Assertj

    AssertJ provides Fluent testing assertions for Java and the Java Virtual Machine (JVM). Starting in version 1.4.0 and prior to version 3.27.7, an XML External Entity (XXE) vulnerability exists in `org.assertj.core.util.xml.XmlStringPrettyFormatter`: the `toXml