Uploaded image for project: 'Cristal extension for Nextcloud'
  1. Cristal extension for Nextcloud
  2. CRISTALNC-56

Upgrade fast-xml-parser to 5.11.1

    XMLWordPrintable

Details

    • Task
    • Resolution: Fixed
    • Major
    • 1.8.0
    • None
    • None
    • Unknown

    Description

      Upgrade fast-xml-parser from 5.9.3 to 5.11.1.

      5.9.3 is affected by a high severity advisory, patched in 5.10.1: repeated DOCTYPE declarations reset the entity expansion counter, allowing an entity expansion denial of service. The parser reads the WebDAV responses returned by the Nextcloud server.

      Attachments

        Activity

          People

            mleduc Manuel Leduc
            mleduc Manuel Leduc
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: