Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.07929·Published 2017-06-29·Will not fixCWE-416
The _clone function in XML::LibXML before 2.0119 does not properly set the expand_entities option, which allows remote attackers to conduct XML external entity (XXE) attacks via crafted XML data to the (1) new or (2) loa…
CVSS 2.0MEDIUM 5.0·Network·No auth·Interaction —·EPSS 0.04019·Published 2015-05-12·Will not fixCWE-611
