Threats affecting pkg:github/eclipse-actf/miChecker

An XML External Entity (XXE) vulnerability (CWE-611) exists in Eclipse Accessibility Tools Framework (ACTF) versions up to 1.6.0, including source versions up to v20260630 and miChecker up to 3.1.0. Exploitation could allow a malicious actor to access local or internal network resources on systems running affected applications. The vulnerability has a medium severity with a CVSS 4.6 score. No official patch or remediation guidance has been provided yet.