XML Library vulnerabilities

1 known vulnerability in XML Library from XML Library Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  XML Library: Improper Restriction of XML External Entity Reference

  CVE-2023-34411Jun 5, 2023XML Library ProjectEPSS 1.16%

  The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service (panic) via an invalid <! token (such as <!DOCTYPEs/%<!A nesting) in an XML document. The earliest affected version is 0.8.9.