Skip to content
OpenAdvisories

Package · Hex

sweet_xml

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2019-15160

    Inline DTD allows XML bomb attack

    The SweetXml (aka sweet_xml) package through 0.6.6 for Erlang and Elixir allows attackers to cause a denial of service (resource consumption) via an XML entity expansion attack with an inline DTD.

    sweet_xml Hex