Cyclonedx Javascript Library
Approved changes feed: RSS · Atom
cpe:2.3:a:cyclonedx:cyclonedx-javascript-library:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Cyclonedx (9c296626-f9c8-5a11-bfde-f9e85e0a544e) |
|---|---|
| Product | Cyclonedx Javascript Library (c4436d6f-1580-5d47-ab44-4d969d7d1a95) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-34345 |
vulnerable | 2026-06-08 06:37:33.145608 |
@cyclonedx/cyclonedx-library Improper Restriction of XML External Entity Reference vulnerability
HIGH (8.1)
The CycloneDX JavaScript library contains the core functionality of OWASP CycloneDX for JavaScript. In 6.7.0, XML External entity injections were possible, when running the provided XML Validator on arbitrary input. This issue was fixed in version 6.7.1.
Published: 2024-05-09T14:56:07.494Z
Updated: 2024-08-02T02:51:09.775Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.