Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-25235
9.8
CRITICALCVSS v3
Published
February 16, 2022
CVSS v2
7.5 HIGH
Affected
6 projects
Assigned by
MITRE
Severity scale
010
Description
xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.
libexpat/libexpat
GitHub:herb: Fast streaming XML parser written in C99 with >90% test coverage; moved from SourceForge to GitHub
GitHub:herb: Fast streaming XML parser written in C99 with >90% test coverage; moved from SourceForge to GitHub< 2.4.5NVD
Crates.io
fedora
Python Package Index
Docker Hub
NPM
RubyGems