VYPR

Xmlquery

by Xmlquery Project

CVEs (1)

  • CVE-2020-25614CriSep 16, 2020
    risk 0.57cvss 9.8epss 0.02

    xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service (SIGSEGV) at xmlquery.(*Node).InnerText or possibly have unspecified other impact.