exploitDog

GHSA-26jv-2hm2-rqwv

Опубликовано: 08 сент. 2026

Источник: github

Github: Не прошло ревью

CVSS4: 5.3

Описание

The API is prone to XML external entity (XXE) injection. By default, XML external entity support is enabled. This issue affects NanoXML: 2.2.3.

The API is prone to XML external entity (XXE) injection. By default, XML external entity support is enabled. This issue affects NanoXML: 2.2.3.

Ссылки

EPSS

Процентиль: 14%

0.00232

Низкий

5.3 Medium

CVSS4

CVE ID

Дефекты

CWE-611

Связанные уязвимости

CVE-2026-19614

ubuntu

13 дней назад

The API is prone to XML external entity (XXE) injection. By default, XML external entity support is enabled. This issue affects NanoXML: 2.2.3.

CVE-2026-19614

nvd

13 дней назад

The API is prone to XML external entity (XXE) injection. By default, XML external entity support is enabled. This issue affects NanoXML: 2.2.3.

CVE-2026-19614

debian

13 дней назад

The API is prone to XML external entity (XXE) injection. By default, X ...

EPSS

Процентиль: 14%

0.00232

Низкий

5.3 Medium

CVSS4

CVE ID

Дефекты

CWE-611