Packages tracked
38,394
CVEs found
728
Fixed in fork
13
Fixed upstream
8
In flight
6
Pending
700
Reset
1 matching records
CVEProjectTitleFork fixStateEvidenceDiscussion
DEBIAN-CVE-2013-0340debian/expatexpat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a -Awaiting approvalEvidenceNone recorded