https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 07:57:21 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-357277 EUVD-2026-357277 https://cve.radiocsirt.org/vuln/euvd-2026-357277 https://cve.radiocsirt.org/vuln/fkie_cve-2026-47080 <p>XML Injection vulnerability in joshnuss xml_builder (XmlBuilder module) allows Content Spoofing, XML Injection.</p> <p>This vulnerability is associated with program files lib/xml_builder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.escape/1.</p> <p>The escape/1 clause for {:cdata, data} in lib/xml_builder.ex concatenates data verbatim between the CDATA opener &lt;![CDATA[ and closer ]]&gt; without rewriting or splitting on the embedded ]]&gt; sequence. Because CDATA sections have no internal escape mechanism, the only safe way to embed arbitrary bytes is to split on ]]&gt; and emit adjacent CDATA sections. An attacker who can supply input containing ]]&gt; closes the CDATA section early; any bytes that follow are parsed as ordinary XML markup by downstream consumers, allowing injection of arbitrary elements, text, or entity references into the output document.</p> <p>This issue affects xml_builder: from 0.0.7 before 2.4.1.</p> <p>XML Injection vulnerability in joshnuss xml_builder (XmlBuilder module) allows Content Spoofing, XML Injection.</p> <p>This vulnerability is associated with program files lib/xml_builder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.escape/1.</p> <p>The escape/1 clause for {:cdata, data} in lib/xml_builder.ex concatenates data verbatim between the CDATA opener &lt;![CDATA[ and closer ]]&gt; without rewriting or splitting on the embedded ]]&gt; sequence. Because CDATA sections have no internal escape mechanism, the only safe way to embed arbitrary bytes is to split on ]]&gt; and emit adjacent CDATA sections. An attacker who can supply input containing ]]&gt; closes the CDATA section early; any bytes that follow are parsed as ordinary XML markup by downstream consumers, allowing injection of arbitrary elements, text, or entity references into the output document.</p> <p>This issue affects xml_builder: from 0.0.7 before 2.4.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-47080