Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-20843
7.5
HIGHCVSS v3
Published
June 24, 2019
CVSS v2
7.8 HIGH
Affected
6 projects
Assigned by
MITRE
Severity scale
010
Description
In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks).
libexpat/libexpat
GitHub:herb: Fast streaming XML parser written in C99 with >90% test coverage; moved from SourceForge to GitHub
GitHub:herb: Fast streaming XML parser written in C99 with >90% test coverage; moved from SourceForge to GitHub< 2.2.7NVD
Docker Hub
fedora
Crates.io
NPM
RubyGems