FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2025-01-14 21:31:10 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
e3ec8b30-757b-11ec-922f-654747404482	Prosody XMPP server advisory 2022-01-13 The Prosody teaM reports: It was discovered that an internal Prosody library to load XML based on does not properly restrict the XML features allowed in parsed XML data. Given suitable attacker input, this results in expansion of recursive entity references from DTDs (CWE-776). In addition, depending on the libexpat version used, it may also allow injections using XML External Entity References (CWE-611). Discovery 2022-01-10 Entry 2022-01-14 prosody < 0.11.12 CVE-2022-0217 https://prosody.im/security/advisory_20220113/

VuXML ID

Description

e3ec8b30-757b-11ec-922f-654747404482

Prosody XMPP server advisory 2022-01-13

The Prosody teaM reports:

It was discovered that an internal Prosody library to load XML based on does not properly restrict the XML features allowed in parsed XML data. Given suitable attacker input, this results in expansion of recursive entity references from DTDs (CWE-776). In addition, depending on the libexpat version used, it may also allow injections using XML External Entity References (CWE-611).

Discovery 2022-01-10
Entry 2022-01-14
prosody

< 0.11.12

CVE-2022-0217
https://prosody.im/security/advisory_20220113/