Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-43680
7.5
HIGHCVSS v3
Published
October 24, 2022
Affected
6 projects
Assigned by
MITRE
Severity scale
010
Description
In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.
libexpat/libexpat
GitHub:herb: Fast streaming XML parser written in C99 with >90% test coverage; moved from SourceForge to GitHub
GitHub:herb: Fast streaming XML parser written in C99 with >90% test coverage; moved from SourceForge to GitHub<= 2.4.9NVD
Crates.io
fedora
Python Package Index
Docker Hub
NPM
RubyGems