Lucene search
+L

2 matches found

OSV
OSV
added 2025/11/14 12:39 p.m.9 views

OESA-2025-2673 expat security update

expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML...

7.5CVSS6.9AI score0.01569EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2022/11/15 10:31 a.m.12 views

golang: encoding/xml: stack exhaustion in Decoder.Skip

A flaw was found in golang encoding/xml. When calling Decoder, Skip while parsing a deeply nested XML document, a panic can occur due to stack exhaustion and allows an attacker to impact system availability...

7.5CVSS6.6AI score0.01885EPSS
SaveExploits0References6
Rows per page
Query Builder