Squareup Retrofit
2 CVEs affecting Squareup Retrofit. Latest disclosed: 2018-12-20. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-1000844 | Critical | 9.1 | 2018-12-20 | Square Open Source Retrofit version Prior to commit 4a693c5aeeef2be6c7ecf80e7b5ec79f6ab59437 contains a XML External Entity (XXE) vulnerability in JAXB that ca… |
CVE-2018-1000850 | High | 7.5 | 2018-12-20 | Square Retrofit version versions from (including) 2.0 and 2.5.0 (excluding) contains a Directory Traversal vulnerability in RequestBuilder class, method addPat… |