PT-2026-46121

Name of the Vulnerable Software and Affected Versions Docling versions prior to 2.74.0 Description The USPTO patent XML parser uses the xml.sax.parseString function without protection against XML External Entity XXE attacks. This allows an attacker to use malicious XML files with external entity...

PT-2022-4443 · Unknown · Node-Opcua

Name of the Vulnerable Software and Affected Versions: node-opcua versions prior to 2.74.0 Description: The issue is related to a missing limitation on the number of received chunks per single session or in total for all concurrent sessions, which can lead to a Denial of Service DoS. An attacker...