Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files.Mar 6, 2026
- Medium4.9MarkUs is a web application for the submission and grading of student assignments.Mar 6, 2026
- High7.5libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).EPSS 2.0%Mar 10, 2024
- Medium5.5libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.EPSS 0.4%Feb 4, 2024
- Medium6.5A flaw was found in libxml2.EPSS 2.1%Jul 9, 2021
- High7.5In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLin…EPSS 6.6%Sep 4, 2019
6 records · page 1 of 1
PreviousNext