VYPR
Critical severity9.1NVD Advisory· Published Jan 14, 2021· Updated Jun 17, 2026

CVE-2021-23926

CVE-2021-23926

Description

The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Vulnerabilities include possibilities for XML Entity Expansion attacks. Affects XMLBeans up to and including v2.6.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.apache.xmlbeans:xmlbeansMaven
< 3.0.03.0.0

Affected products

28

Patches

Vulnerability mechanics

References

14

News mentions

0

No linked articles in our index yet.