CVE-2019-15160
The SweetXml (aka sweet_xml) package through 0.6.6 for Erlang and Elixir allows attackers to cause a denial of service (resource consumption) via an XML entity expansion attack …
Published: 2019-08-19 · CVSS: Unscored
The SweetXml (aka sweet_xml) package through 0.6.6 for Erlang and Elixir allows attackers to cause a denial of service (resource consumption) via an XML entity expansion attack with an inline DTD.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7