CVE-2018-20222: Airsonic Project Airsonic

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

XXE issue in Airsonic before 10.1.2 during parse.

Affected products

• Airsonic Project Airsonic: before 10.1.2 (fixed in 10.1.2)

Published 2019-04-04. Last modified 2026-06-17.