https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T22:27:50.008984+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-209587 EUVD-2026-209587 2026-10-14T22:27:50.012558+00:00 EUVD-2026-209587 https://cve.radiocsirt.org/vuln/fkie_cve-2023-34411 fkie_cve-2023-34411 2026-10-14T22:27:50.012588+00:00

The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service (panic) via an invalid <! token (such as <!DOCTYPEs/%<!A nesting) in an XML document. The earliest affected version is 0.8.9.

 https://cve.radiocsirt.org/vuln/ghsa-7gf7-jv65-wjmh GHSA-7gf7-jv65-wjmh — xml-rs vulnerable to denial of service via invalid token in XML document 2026-10-14T22:27:50.012617+00:00

Affected: crates.io: xml-rs

The xml-rs crate >= 0.8.9 and < 0.8.14 for Rust and Crab allows a denial of service (panic) via an invalid <! token (such as <!DOCTYPEs/%<!A nesting) in an XML document.

 https://cve.radiocsirt.org/vuln/gsd-2023-34411 gsd-2023-34411 2026-10-14T22:27:50.012642+00:00 gsd-2023-34411 https://cve.radiocsirt.org/vuln/msrc_cve-2023-34411 msrc_CVE-2023-34411 — The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service (panic) via an invalid <! token (such as <!… 2026-10-14T22:27:50.012655+00:00 msrc_CVE-2023-34411 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-34411 UBUNTU-CVE-2023-34411 2026-10-14T22:27:50.012671+00:00

Affected: Ubuntu:20.04:LTS: rust-xml-rs, Ubuntu:22.04:LTS: rust-xml-rs, Ubuntu:24.04:LTS: rust-xml-rs, Ubuntu:25.10: rust-xml-rs, Ubuntu:26.04:LTS: rust-xml-rs

The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service (panic) via an invalid <! token (such as <!DOCTYPEs/%<!A nesting) in an XML document. The earliest affected version is 0.8.9.