Szafir vulnerabilities

1 known vulnerability in Szafir from Krajowa Izba Rozliczeniowa. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  Szafir: Improper Restriction of XML External Entity Reference

  CVE-2026-93570Oct 29, 2026Krajowa Izba Rozliczeniowa

  Szafir and Szafir Weryfikująca are vulnerable to XML External Entity (XXE) injection. When a user signs or verify a crafted XML file containing a `DOCTYPE` with an external DTD reference, the parser processes external entities, allowing an attacker to read arb