DEBIAN-CVE-2021-23926

DEBIAN-CVE-2021-23926 PUBLISHED CVSS 9.100000381469727 CRITICAL

The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Vulnerabilities include possibilities for XML Entity Expansion attacks. Affects XMLBeans up to and including v2.6.0.

Risk Scores

CVSS 3.1

9.100000381469727

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Affected Products

Vendor	Product	Versions
Debian:11	xmlbeans	0, 0, 0
Debian:13	xmlbeans	0, 0, 0
Debian:12	xmlbeans	0, 0, 0
Debian:14	xmlbeans	0, 0, 0

Timeline

Jan 14, 2021 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2021-23926 advisory

Open in Interactive Console →