~ / search / GHSA-qvwf-w35m-6r95

GHSA-qvwf-w35m-6r95

XXE Vulnerability in XMLBundle 0.1.7

Source: GitHub Advisory Database (reviewed) High CVE-2017-1000477

Packages

EcosystemPackageAffectedFixed in
Packagist desperado/xml-bundle <= 0.1.7 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

XMLBundle version 0.1.7 is vulnerable to XXE attacks which can result in denial of service attacks.

References

External links from the advisory. They lead to third-party sites.