Most recent entries from all

EUVD-2026-209587

fkie_cve-2023-34411

The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service (panic) via an invalid <! token (such as <!DOCTYPEs/%<!A nesting) in an XML document. The earliest affected version is 0.8.9.

GHSA-7gf7-jv65-wjmh — xml-rs vulnerable to denial of service via invalid token in XML document

Affected: crates.io: xml-rs

The xml-rs crate >= 0.8.9 and < 0.8.14 for Rust and Crab allows a denial of service (panic) via an invalid <! token (such as <!DOCTYPEs/%<!A nesting) in an XML document.

gsd-2023-34411

msrc_CVE-2023-34411 — The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service (panic) via an invalid msrc_CVE-2023-34411

UBUNTU-CVE-2023-34411

Affected: Ubuntu:20.04:LTS: rust-xml-rs, Ubuntu:22.04:LTS: rust-xml-rs, Ubuntu:24.04:LTS: rust-xml-rs, Ubuntu:25.10: rust-xml-rs, Ubuntu:26.04:LTS: rust-xml-rs