{"action":"Upgrade xml-rs to 0.8.14 or later.","affected":[{"fixed":"0.8.14","introduced":"0.8.9"}],"component":"xml-rs","cve_ids":["CVE-2023-34411"],"ecosystem":"crates.io","epss":0.01162,"exploited":false,"fixed_versions":["0.8.14"],"ghsa_id":"GHSA-7gf7-jv65-wjmh","id":"tcs_01M5KEV8H2S9HDSJ920FQWEG9B","modified_at":"2025-01-08T19:00:56Z","published_at":"2023-06-05T06:30:15Z","references":["https://osv.dev/vulnerability/GHSA-7gf7-jv65-wjmh","https://nvd.nist.gov/vuln/detail/CVE-2023-34411","https://github.com/netvl/xml-rs/pull/226","https://github.com/00xc/xml-rs/commit/0f084d45aa53e4a27476961785f59f2bd7d59a9f","https://github.com/netvl/xml-rs/commit/014d808be900c85a0afc5ccdfe668be040d175aa","https://github.com/netvl/xml-rs/commit/c09549a187e62d39d40467f129e64abf32efc35c","https://github.com/netvl/xml-rs","https://github.com/netvl/xml-rs/compare/0.8.13...0.8.14"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-7gf7-jv65-wjmh","url":"https://osv.dev/vulnerability/GHSA-7gf7-jv65-wjmh"}],"summary":"xml-rs vulnerable to denial of service via invalid token in XML document"}