HSEC-2023-0004
NoneCVSS
—
EPSS
—
Published
Nov 14, 2025
CISA due date
—
The record
xml-conduit unbounded entity expansion
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | haskell-xml-conduit | 0 | No fix |
| Debian:12 | haskell-xml-conduit | 0 | 1.9.1.1-1 |
| Debian:13 | haskell-xml-conduit | 0 | 1.9.1.1-1 |
| Debian:14 | haskell-xml-conduit | 0 | 1.9.1.1-1 |
| Hackage | xml-conduit | 0.5.0 | 1.9.1.0 |
| Ubuntu:20.04:LTS | haskell-xml-conduit | 0 | No fix |
| Ubuntu:22.04:LTS | haskell-xml-conduit | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | haskell-xml-conduit | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | haskell-xml-conduit | 0 | No fix |