Open mend-for-github-com[bot] opened 3 years ago
Library home page: https://source.codeaurora.org/quic/la/platform/external/libxml2/
Found in HEAD commit: 36c617da7227c5471a24ab8d026c496382f77ef5
Found in base branch: main
dvna/node_modules/libxmljs/vendor/libxml/parser.c
A security issue was found in libxml2 before version 2.9.11. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.
Publish Date: 2021-05-10
URL: CVE-2021-3541
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: Low - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: None - Availability Impact: High
Type: Upgrade version
Origin: https://security.archlinux.org/CVE-2021-3541
Release Date: 2021-05-10
Fix Resolution: v2.9.11
CVE-2021-3541 - Medium Severity Vulnerability
Library home page: https://source.codeaurora.org/quic/la/platform/external/libxml2/
Found in HEAD commit: 36c617da7227c5471a24ab8d026c496382f77ef5
Found in base branch: main
A security issue was found in libxml2 before version 2.9.11. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.
Publish Date: 2021-05-10
URL: CVE-2021-3541
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: Low - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: None - Availability Impact: High
For more information on CVSS3 Scores, click here.Type: Upgrade version
Origin: https://security.archlinux.org/CVE-2021-3541
Release Date: 2021-05-10
Fix Resolution: v2.9.11