Approved changes feed: RSS · Atom

cpe:2.3:a:apache:xmlbeans:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductXmlbeans (075b2f6a-b27f-53ff-98c1-97801ae8f4ab)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:apache/xmlbeans purl2cpe 2026-06-01 10:14:31.137359
pkg:deb/debian/xmlbeans purl2cpe 2026-06-01 10:14:31.137362
pkg:deb/ubuntu/xmlbeans purl2cpe 2026-06-01 10:14:31.137365
pkg:github/apache/xmlbeans purl2cpe 2026-06-01 10:14:31.137368
pkg:maven/org.apache.xmlbeans/xmlbeans purl2cpe 2026-06-01 10:14:31.137370
pkg:rpm/opensuse/xmlbeans purl2cpe 2026-06-01 10:14:31.137373

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-23926 vulnerable 2026-06-08 05:30:03.398958 XMLBeans XML Entity Expansion
The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Vulnerabilities include possibilities for XML Entity Expansion attacks. Affects XMLBeans up to and including v2.6.0.
Published: 2021-01-14T14:45:18.000Z
Updated: 2025-02-13T16:27:47.031Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.