@cyclonedx/cyclonedx-library Improper Restriction of XML External Entity Reference vulnerability
- Severity:
- High
Description
XML External entity injections could be possible, when running the provided XML Validator on arbitrary input.
Recommendation
Update the @cyclonedx/cyclonedx-library package to the latest compatible version. Followings are version details:
- Affected version(s): = 6.7.0
- Patched version(s): 6.7.1
References
Related Issues
- x402 SDK vulnerable in outdated versions in resource servers for builders (GHSA-3j63-5h8p-gf7c) 3 - Vulnerability
- Bun has an Application-level Prototype Pollution vulnerability in the runtime native API for Glo - CVE-2024-21548
- jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like initial text label - CVE-2022-31160
- Opening a malicious website while running a Nuxt dev server could allow read-only access to code - CVE-2025-24361
- Tags:
- npm
- @cyclonedx/cyclonedx-library
Anything's wrong? Let us know Last updated on May 14, 2024