Vulnerabilities in CycloneDX
6 resultsCVE-2022-24774HIGHImproper Input Validation leading to Path Traversal in CycloneDX BOM Repository ServerEPSS 1.5%CVE-2024-34345HIGH@cyclonedx/cyclonedx-library Improper Restriction of XML External Entity Reference vulnerabilityEPSS 0.9%CVE-2024-38374HIGHImproper Restriction of XML External Entity Reference in org.cyclonedx:cyclonedx-core-javaEPSS 0.6%CVE-2025-64518HIGHCycloneDX Core (Java): BOM validation is vulnerable to XML External Entity injectionEPSS 0.4%CVE-2026-55849HIGH@cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized `--workspace` ArgumentEPSS 0.2%CVE-2026-71538HIGH@cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized --workspace Argument on WindowsEPSS 0.2%