Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-28757
7.5
HIGHCVSS v3
Published
March 10, 2024
Affected
6 projects
Assigned by
MITRE
Severity scale
010
Description
libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).
libexpat/libexpat
GitHub:herb: Fast streaming XML parser written in C99 with >90% test coverage; moved from SourceForge to GitHub
GitHub:herb: Fast streaming XML parser written in C99 with >90% test coverage; moved from SourceForge to GitHub< 2.6.2NVD
Crates.io
fedora
Python Package Index
Docker Hub
NPM
RubyGems