Unity Linux 20.1070e Security Update: woodstox-core (UTSA-2025-680589)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680589 advisory. Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks DOS if DTD support is enabled. If the parser is running on user supplied input,...

EUVD-2024-44290

Malicious code in bioql PyPI...

EUVD-2023-31861

Malicious code in bioql PyPI...

EUVD-2024-41578

Malicious code in bioql PyPI...

EUVD-2024-32740

Malicious code in bioql PyPI...

EUVD-2025-0146

Malicious code in bioql PyPI...

EUVD-2022-6677

Malicious code in bioql PyPI...

EUVD-2022-29996

Malicious code in bioql PyPI...

EUVD-2024-32745

Malicious code in bioql PyPI...

EUVD-2023-31862

Malicious code in bioql PyPI...

EUVD-2022-3938

Malicious code in bioql PyPI...

EUVD-2022-1819

Malicious code in bioql PyPI...

EUVD-2023-2185

Malicious code in bioql PyPI...

EUVD-2022-6255

Malicious code in bioql PyPI...

EUVD-2022-3731

Malicious code in bioql PyPI...

Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

Overview rexml is an An XML toolkit for Ruby. Affected versions of this package are vulnerable to Improper Restriction of Recursive Entity References in DTDs 'XML Entity Expansion' due to parsing XML. An attacker can cause excessive resource consumption and disrupt service availability by...

Linux Distros Unpatched Vulnerability : CVE-2024-23807

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DTDs. Users are...

Linux Distros Unpatched Vulnerability : CVE-2022-28890

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the RDF/XML parser of Apache Jena allows an attacker to cause an external DTD to be retrieved. This issue affects Apache Jena version 4.4.0 a...

Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

Overview llama-index-readers-web is a llama-index readers web integration Affected versions of this package are vulnerable to Improper Restriction of Recursive Entity References in DTDs 'XML Entity Expansion' via the parsesitemap function. An attacker can exhaust system memory and potentially cau...

Astra Linux – Vulnerability in libxml2

In libxml2 versions before 2.12.10 and 2.13.x before 2.13.6, there is a stack-based buffer overflow in the xmlSnprintfElements function in the valid.c file. To exploit this vulnerability, DTD validation must be performed for untrusted documents or untrusted DTDs. NOTE: This vulnerability is simil...