Skip to content
OpenAdvisories

Package · Hex

xml_builder

3 known vulnerabilities.

3 results · Feed

  • Low 2.1

    Round-trip Corruption via Improper Entity Escaping in xml_builder

    Inappropriate Encoding for Output Context vulnerability in joshnuss xml_builder (XmlBuilder module) allows Content Spoofing, Cross-site Scripting. This vulnerability is associated with program files lib/xml_builder.ex and program routines XmlBuilder.generate/…

  • Low 2.1

    Element and Attribute Names Injected Verbatim into XML Output in xml_builder

    XML Injection vulnerability in joshnuss xml_builder (XmlBuilder module) allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xml_builder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilde…

  • Low 2.1

    CDATA Section Breakout via Unsanitised ]]> in xml_builder

    XML Injection vulnerability in joshnuss xml_builder (XmlBuilder module) allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xml_builder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilde…