Pmd Project Pmd
2 CVEs affecting Pmd Project Pmd. Latest disclosed: 2026-02-27. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-7722 | High | 8.1 | 2019-02-11 | PMD 5.8.1 and earlier processes XML external entities in ruleset files it parses as part of the analysis process, allowing attackers tampering it (either by di… |
CVE-2026-28338 | Medium | 6.8 | 2026-02-27 | PMD is an extensible multilanguage static code analyzer. Prior to version 7.22.0, PMD's `vbhtml` and `yahtml` report formats insert rule violation messages int… |