Vulnerabilities

3 records

Sort

TI-2026-85812 CVE-2026-66294 · GHSA-w2hc-m8qc-7hgm

XML injection in Saxy via unescaped CDATA section terminator

LOW 10

XML injection in the Saxy XML encoder.

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.00168 Published 2026-11-06 Fixed in 1.7.0 CWE-91

TI-2026-85813 CVE-2026-66295 · GHSA-wm7q-49mg-7frh

LOW 10

Saxy's XML encoder writes the target and the content of a processing instruction into the output document verbatim, without validation or escaping.

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.00168 Published 2026-11-06 Fixed in 1.7.0 CWE-91

TI-2026-85811 CVE-2026-66293 · GHSA-7h52-pqgv-pcwc

LOW 10

XML injection in the encoder of Saxy.

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.00168 Published 2026-11-06 Fixed in 1.7.0 CWE-91