CWE-776

The XML and schema validation functionalities within the SchemaValidator Mediator process XML input as part of validatio

fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based li

SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version

fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. Versions 4.0.0-be

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.

Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.

Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized att

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. In @xmldom

Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks thru 2.61.0. The backend extracts and val

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.4

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.4

NLTK versions before 3.10.3 use xml.etree.ElementTree to parse XML in multiple modules, which honors entity declarations

A flaw was found in Apicurio Registry. The DocumentBuilderAccessor correctly blocks external DTD and schema access but d

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos

pypdf is a free and open-source pure-python PDF library. In versions prior to 6.10.0, manipulated XMP metadata entity de

A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauthenticated remote attacker to t

IBM Engineering Lifecycle Management 7.0.3 ( Interim Fix 001 through ) Interim Fix 021, 7.1.0 ( Interim Fix 001 through

In Progress® Telerik® UI for AJAX prior to v2026.2.708, the internal LayoutBuilder control processes client-state XML wi

MarkUs is a web application for the submission and grading of student assignments. Prior to version 2.9.4, MarkUs allows

SolidCAM-GPPL-IDE is an unofficial, independently developed extension, Postprocessor IDE for SolidCAM. From version 1.0.

fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. From 5.9.3 until