[GHSA-jx49-fphc-w293] Improper Restriction of XML External Entity Reference...

[Bhanu99517]

Updates

• Affected products
• Source code location
• Summary

Comments
Added affected package (digital.slovensko.autogram on Maven), affected version range (< 2.7.2), and patched version (2.7.2) based on the official release notes at https://github.com/slovensko-digital/autogram/releases/tag/v2.7.2

[shelbyc]

Hi @Bhanu99517, I found a pom.xml for Autogram at https://github.com/slovensko-digital/autogram/blob/main/pom.xml, but I can't find an entry on https://central.sonatype.com/ or https://mvnrepository.com. Are you able to find an entry for Autogram? If not, I won't be able to review the advisory.

[github-actions]

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the Keep label to hold stale off permanently, or do nothing. If you do nothing this pull request will be closed eventually by the stale bot. Please see CONTRIBUTING.md for more policy details.