CVE-2019-9658

Checkstyle before 8.18 loads external DTDs by default.

References