2 matches found
PT-2026-34618
Name of the Vulnerable Software and Affected Versions @xmldom/xmldom versions prior to 0.8.13 @xmldom/xmldom versions prior to 0.9.10 xmldom versions 0.6.0 and earlier Description The software allows attacker-controlled processing instruction PI data to be serialized into XML without validating o...
8.7CVSS5.9AI score0.00408EPSS
SaveExploits0References22
OESA-2024-1641 libxml2 security update
This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...
7.5CVSS7.2AI score0.02298EPSS
SaveExploits1References2
20