com.github.wxpay:wxpay-sdk (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package com.github.wxpay:wxpay-sdk, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (1)

• CVE-2018-13439 — CVSS 7.5 (high): WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL.