Search vulnerabilities

Results 1

Export CSV
CVE-2023-34411

The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service (panic) via an invalid <! token (such as <!DOCTYPEs/%<!A nesting) in an XML document. The earliest affected version is 0.8.9.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Products