SimpleXML (latest version 2.7.1) is vulnerable to an XXE vulnerability resulting SSRF, information disclosure, DoS and so on.

[just3019]

I refer to Minio via Maven。

<dependency>
    <groupId>io.minio</groupId>
    <artifactId>minio</artifactId>
    <version>7.0.2</version>
</dependency>

I found security issues with Simple-XML from Dependency - Check。

result:SimpleXML (latest version 2.7.1) is vulnerable to an XXE vulnerability resulting SSRF, information disclosure, DoS and so on.
cve-uri

[nitisht]

Thanks we'll take a look @just3019

[harshavardhana]

Fixed in #908