Advisories for Maven/Org.mapfish.print/Print-Lib package

XXE on MapFish Print allows reading arbitrary files of certain types. Eg /etc/passwd or k8 secrets and certs. https://github.com/mapfish/mapfish-print/commit/13020c0fbc299e5f604e4e66066311c4bf04d507

The attacker can execute arbitrary code without being authenticated

In mapfish-print, an attacker can run an XML External Entity (XXE) attack with the provided SDL style.

In mapfish-print, a user can use the JSONP support to do a Cross-site scripting.