[GHSA-jx49-fphc-w293] Improper Restriction of XML External Entity Reference...

[Bhanu99517]

Updates

• Affected products
• Source code location
• Summary

Comments
Added affected package (digital.slovensko.autogram on Maven), affected version range (< 2.7.2), and patched version (2.7.2) based on the official release notes at https://github.com/slovensko-digital/autogram/releases/tag/v2.7.2

[shelbyc]

Hi @Bhanu99517, I found a pom.xml for Autogram at https://github.com/slovensko-digital/autogram/blob/main/pom.xml, but I can't find an entry on https://central.sonatype.com/ or https://mvnrepository.com. Are you able to find an entry for Autogram? If not, I won't be able to review the advisory.