CycloneDX cyclonedx-core-java

• CVE-2025-64518 High 7.5 CycloneDX Core (Java): BOM validation is vulnerable to XML External Entity injection 0.4%
• CVE-2024-38374 High 7.5 Improper Restriction of XML External Entity Reference in org.cyclonedx:cyclonedx-core-java 0.6%