CVE-2022-40154: This advisory has been invalidated due to the CVE being rejected

September 17, 2022 (updated October 25, 2022)

This advisory has been invalidated due to the CVE being rejected.

References

bugs.chromium.org/p/oss-fuzz/issues/detail?id=50393
github.com/FasterXML/woodstox/issues/157
github.com/FasterXML/woodstox/issues/160
github.com/FasterXML/woodstox/pull/159
github.com/advisories/GHSA-9fwf-46g9-45rx
github.com/x-stream/xstream/issues/304
nvd.nist.gov/vuln/detail/CVE-2022-40154

Code Behaviors & Features

Detect and mitigate CVE-2022-40154 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →