Woodstox vulnerabilities

1 known vulnerability in Woodstox from Xstream. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Woodstox: Out-of-bounds Write

  CVE-2022-40152Sep 16, 2022XstreamEPSS 18.2%

  Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect