{"action":"Upgrade org.apache.santuario:xmlsec to 1.4.8 (1.4.x) or 1.5.3 (1.5.x) or later.","affected":[{"fixed":"1.4.8","introduced":"1.4.0"},{"fixed":"1.5.3","introduced":"1.5.0"}],"component":"org.apache.santuario:xmlsec","cve_ids":["CVE-2013-5823"],"ecosystem":"Maven","epss":0.04732,"exploited":false,"fixed_versions":["1.4.8","1.5.3"],"ghsa_id":"GHSA-8gwc-x7mg-7p7p","id":"tcs_01M5N8MQA8PZ3R4ED6EVEF2WC2","modified_at":"2026-09-10T03:49:21.305344700Z","published_at":"2022-05-14T00:02:32Z","references":["https://osv.dev/vulnerability/GHSA-8gwc-x7mg-7p7p","https://nvd.nist.gov/vuln/detail/CVE-2013-5823","https://github.com/apache/santuario-java/commit/55a48497dfbf3fe63a81e67c13160b3f41ebb1f3","https://github.com/apache/santuario-java/commit/cea3c91106fb8be35e2f1bb3f1fe0cfddd0ec710","https://github.com/apache/santuario-java/commit/f9a61f2df9473237aa71308c28113540b4063d33","https://access.redhat.com/errata/RHSA-2014:0414","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-5823","https://issues.apache.org/jira/browse/SANTUARIO-334","https://lists.opensuse.org/opensuse-updates/2013-11/msg00023.html","https://marc.info/?l=bugtraq&m=138674031212883&w=2","https://marc.info/?l=bugtraq&m=138674073720143&w=2","https://security.gentoo.org/glsa/glsa-201406-32.xml"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-8gwc-x7mg-7p7p","url":"https://osv.dev/vulnerability/GHSA-8gwc-x7mg-7p7p"}],"summary":"Apache XML Security For Java vulnerable to Infinite Loop"}