OCaml Xml-Light Library before r234 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via…
CVSS 2.0MEDIUM 5.0·Network·No auth·Interaction —·EPSS 0.01497·Published 2012-08-25·Will not fixCWE-310