The CycloneDX JavaScript library had XML external entity injection vulnerability in 6.7.0, fixed in 6.7.
Reporter | Title | Published | Views | Family All 8 |
---|---|---|---|---|
![]() | CVE-2024-34345 @cyclonedx/cyclonedx-library Improper Restriction of XML External Entity Reference vulnerability | 9 May 202414:56 | – | vulnrichment |
![]() | CVE-2024-34345 @cyclonedx/cyclonedx-library Improper Restriction of XML External Entity Reference vulnerability | 9 May 202414:56 | – | cvelist |
![]() | CVE-2024-34345 | 14 May 202415:38 | – | osv |
![]() | GHSA-38GF-RH2W-GMJ7 @cyclonedx/cyclonedx-library Improper Restriction of XML External Entity Reference vulnerability | 8 May 202419:55 | – | osv |
![]() | @cyclonedx/cyclonedx-library Improper Restriction of XML External Entity Reference vulnerability | 8 May 202419:55 | – | github |
![]() | CVE-2024-34345 | 14 May 202415:38 | – | nvd |
![]() | XML External Entity (XXE) Injection | 9 May 202410:18 | – | veracode |
![]() | CVE-2024-34345 | 5 Feb 202511:30 | – | redhatcve |
[
{
"vendor": "CycloneDX",
"product": "cyclonedx-javascript-library",
"versions": [
{
"version": "= 6.7.0",
"status": "affected"
}
]
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo