Xmlsec Project Xmlsec
2 CVEs affecting Xmlsec Project Xmlsec. Latest disclosed: 2017-07-17. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-1000061 | High | 7.1 | 2017-07-17 | xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting in possible information disclosure or d… |
CVE-2016-9318 | Medium | 5.5 | 2016-11-16 | libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be… |