Skip to main content
cve.nowby Sazabi
← Hex
HexPackage

saxy

3 known vulnerabilities (3 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 3 low
Registry
Hex

Advisories 3

  • XML injection in Saxy via unescaped CDATA section terminator

    Affected: from 0.7.0, fixed in 1.7.0; from 0.7.0, fixed in 1.7.0.

  • Processing instruction target and content emitted unescaped in Saxy encoder allows XML injection

    Affected: from 0.7.0, fixed in 1.7.0; from 0.7.0, fixed in 1.7.0.

  • XML comment injection in Saxy encoder via unescaped double hyphen

    Affected: from 0.7.0, fixed in 1.7.0; from 0.7.0, fixed in 1.7.0.