XML Library Project vulnerabilities
We track 1 vulnerability in XML Library Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 5, 2023.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest XML Library Project vulnerabilities
- 7.5 High severity
XML Library: Improper Restriction of XML External Entity Reference
The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service (panic) via an invalid <! token (such as <!DOCTYPEs/%<!A nesting) in an XML document. The earliest affected version is 0.8.9.