Leanify Project Leanify
2 CVEs affecting Leanify Project Leanify. Latest disclosed: 2019-06-15. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-12835 | Critical | 9.8 | 2019-06-15 | formats/xml.cpp in Leanify 0.4.3 allows for a controlled out-of-bounds write in xml_memory_writer::write via characters that require escaping. |
CVE-2019-12298 | Medium | 5.5 | 2019-05-23 | Leanify 0.4.3 allows remote attackers to trigger an out-of-bounds write (1024 bytes) via a modified input file. |