Lucene search
+L

1 matches found

OSV
OSV
added 2024/05/09 2:56 p.m.25 views

CVE-2024-34345 @cyclonedx/cyclonedx-library Improper Restriction of XML External Entity Reference vulnerability

The CycloneDX JavaScript library contains the core functionality of OWASP CycloneDX for JavaScript. In 6.7.0, XML External entity injections were possible, when running the provided XML Validator on arbitrary input. This issue was fixed in version 6.7.1...

8.1CVSS8AI score0.00925EPSS
SaveExploits0References5
Rows per page
Query Builder