Robuta

https://www.openwall.com/lists/oss-security/2018/08/22/4 oss-security - CVE-2018-11758: Apache Cayenne XXE Vulnerability in CayenneModeler GUI tool