Skip to main content
← Hex

xml_builder

3 known vulnerabilities (3 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 3 low
Registry
Hex

Advisories 3

  • Round-trip Corruption via Improper Entity Escaping in xml_builder

    Affected: from 0.0.6, fixed in 2.4.1; from 0.0.6, fixed in 2.4.1.

  • Element and Attribute Names Injected Verbatim into XML Output in xml_builder

    Affected: from 0.0.1, fixed in 2.4.1; from 0.0.1, fixed in 2.4.1.

  • CDATA Section Breakout via Unsanitised ]]> in xml_builder

    Affected: from 0.0.7, fixed in 2.4.1; from 0.0.7, fixed in 2.4.1.