Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-3674
7.5
HIGHCVSS v3
Published
May 17, 2016
CVSS v2
5 MEDIUM
Affected
5 projects
Assigned by
MITRE
Severity scale
010
Description
Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Driver, (5) SjsxpDriver, (6) StandardStaxDriver, and (7) WstxDriver drivers in XStream before 1.4.9 allow remote attackers to read arbitrary files via a crafted XML document.
xstream
NPMAn extremely intuitive, small, and fast functional reactive stream library for JavaScript
NPMAn extremely intuitive, small, and fast functional reactive stream library for JavaScript= *, < 1.4.9NVD
staltz/xstream
GitHubAn extremely intuitive, small, and fast functional reactive stream library for JavaScript
GitHubAn extremely intuitive, small, and fast functional reactive stream library for JavaScript= *, < 1.4.9NVD
x-stream/xstream
GitHub
RubyGems