[GHSA-58qw-p7qm-5rvh] Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations

[chadlwilson]

Updates

• Affected products

Comments
The fix for this issue has been backported and released as part of https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.52.v20230823 via jetty/jetty.project#10299

• Last affected 9.x release is https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.51.v20230217
• Earliest 10.x release taken from https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-xml

[github]

Hi there @jmcc0nn3ll and @gregw! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our highly-trained Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

[chadlwilson]

Somewhat duplicated by #2688 from the maintainers, so closing