Checkstyle before 8.18 loads external DTDs by default.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9658
Reference (s):
- FEDORA:FEDORA-2019-4696630d6f
- URL: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2BMOPJ2XYE4LB2HM7OMSUBBIYEDUTLWE/
- FEDORA:FEDORA-2019-a3f67e2364
- URL: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AEYBAHYAV37WHMOXZYM2ZWF46FHON6YC/
- FEDORA:FEDORA-2019-e4405b4c9f