Lucene search
+L

1 matches found

OSV
OSV
added 2024/12/23 5:15 p.m.4 views

AZL-54657 CVE-2024-40896 affecting package libxml2 for versions less than 2.11.5-2

In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content by setting "checked". This makes classic XXE attacks possible...

9.1CVSS6.9AI score0.01216EPSS
SaveExploits0References1
Rows per page
Query Builder