Skip to content
OpenAdvisories

Package · Ubuntu

rust-xml-rs

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2023-34411

    xml-rs vulnerable to denial of service via invalid token in XML document

    The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service (panic) via an invalid <! token (such as <!DOCTYPEs/%<!A nesting) in an XML document. The earliest affected version is 0.8.9.

    xml-rs rust-xml-rs Ubuntu crates.io