CVE-2024-34345 — @cyclonedx/cyclonedx-library Improper Restriction of XML External Entity Reference vulnerability
The CycloneDX JavaScript library contains the core functionality of OWASP CycloneDX for JavaScript. In 6.7.0, XML External entity injections were possible, when running the prov…
Published: 2024-05-09 · CVSS: 8.1 · CVSS 3.1
The CycloneDX JavaScript library contains the core functionality of OWASP CycloneDX for JavaScript. In 6.7.0, XML External entity injections were possible, when running the provided XML Validator on arbitrary input. This issue was fixed in version 6.7.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7