CVE-2025-52643 HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment

HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment. This may expose the application to potential security risks, including unintended behaviour or integrity impact when processing specially crafted files...

CVE-2025-52643

The CVE-2025-52643 entry concerns HCL AION and describes a vulnerability where untrusted file parsing is not performed in a properly isolated sandbox. This could enable unintended behavior or integrity impact when processing crafted files. Public technical details (affected versions, root cause, ...

rexml: DoS vulnerability in REXML

An uncontrolled resource consumption vulnerability was found in REXML. When parsing an untrusted XML with many specific characters such as , it can lead to a denial of service...

XML External Entity (XXE) Injection

Overview Glances is an A cross-platform curses-based monitoring tool Affected versions of this package are vulnerable to XML External Entity XXE Injection via the use of Fault to parse untrusted XML data, which is known to be vulnerable to XML attacks. Details XXE Injection is a type of attack...