Apache Vysper XML parsing can exhaust memory on all versions
CVE-2026-115721 is an unauthenticated network denial of service scored CVSS 7.5; the retired project will not be fixed.
Stories per day · 30 days
2 RSS
2 stories, newest first · one card per story
Stories tagged #xml-parsing
Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability
Cisco patched an XXE flaw in BroadWorks' OCI XML parser letting unauthenticated remote attackers read sensitive files from the filesystem.