New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

XML External Entity (XXE) #3

Open

srikanthprathi opened this issue Sep 21, 2020 · 0 comments

srikanthprathi commented Sep 21, 2020

I would like to report an XML External Entity (XXE) billion laughs vulnerability in the latest version 0.1.1.

While converting an XML document into a JSON, the module does not validate/sanitizes the external DTD's.
Impact: Denial of Service

Please contact me for the POC if required. Thanks.

# for free to join this conversation on GitHub. Already have an account? # to comment