CycloneDX/cyclonedx-javascript-library

CycloneDX/cyclonedx-javascript-library

GitHubGitHub
GitHubgithub.com
cyclonedx.orgcyclonedx.org
Releases115
Frequency1 week 4 days
Last Release
Stars24
Functionality and DataModels of OWASP CycloneDX for JavaScript (Node.js or WebBrowser) written in TypeScript.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-34345↗
8.1 HIGH—

The CycloneDX JavaScript library contains the core functionality of OWASP CycloneDX for JavaScript. In 6.7.0, XML External entity injections were possible, when running the provided XML Validator on arbitrary input. This issue was fixed in version 6.7.1.