EPSS
Percentile
78.5%
parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a โ%โ character in a DTD name.
bugzilla.redhat.com/show_bug.cgi?id=1517307