{"action":"Upgrade prosody to 0.11.12-1 or later.","affected":[{"fixed":"0.11.12-1","introduced":"0"}],"component":"prosody","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["0.11.12-1"],"id":"tcs_01M5NG9JXVGTHVPZST9VHEHBMT","modified_at":"2026-10-15T08:01:25.651984657Z","published_at":"2022-08-26T18:15:08.833Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2022-0217","https://security-tracker.debian.org/tracker/CVE-2022-0217"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2022-0217#Debian:13/prosody","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2022-0217"}],"summary":"It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML data. Given suitable attacker input, this results in"}