Lucene search

K
osvGoogleOSV:GHSA-Q7WX-62R7-J2X7
HistoryAug 08, 2018 - 10:31 p.m.

Nokogiri vulnerable to libxml XML Entity Expansion

2018-08-0822:31:12
Google
osv.dev
21

0.025 Low

EPSS

Percentile

90.2%

The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.

References