GHSA-x832-fpvj-r5ph: Mustangproject allows exfiltrating files via XXE attacks

Skip to content

Navigation Menu

• • AI CODE CREATION

    • GitHub CopilotWrite better code with AI

    • GitHub SparkBuild and deploy intelligent apps

    • GitHub ModelsManage and compare prompts

    • MCP RegistryNewIntegrate external tools

View all features

• Pricing

Provide feedback

Saved searches****Use saved searches to filter your results more quickly

Sign up

Appearance settings

1. GitHub Advisory Database
2. GitHub Reviewed
3. CVE-2025-66372

Mustangproject allows exfiltrating files via XXE attacks

Low severity GitHub Reviewed Published Nov 28, 2025 to the GitHub Advisory Database • Updated Dec 1, 2025

Package

maven org.mustangproject:library (Maven)

Affected versions

< 2.16.3

maven org.mustangproject:validator (Maven)

Description

Published to the GitHub Advisory Database

Nov 28, 2025