Packagist/desperado/xml-bundle CVE-2017-1000477: high 7.5, EPSS 1.10%
XXE Vulnerability in XMLBundle 0.1.7
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.1.7 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-qvwf-w35m-6r95
- https://nvd.nist.gov/vuln/detail/CVE-2017-1000477
- https://github.com/pravednik/xmlBundle/issues/2
- https://github.com/pravednik/xmlBundle/pull/5/commits/803d8cb34b972e67c2144b8b36575f97d14ef1d6
CVE-2017-1000477 · published · modified · JSON