← Back to CVE List

CVE-2023-34411

Published: 2023-06-05T04:15Z
Last Modified: 2025-01-08T17:15Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service (panic) via an invalid <! token (such as <!DOCTYPEs/%<!A nesting) in an XML document. The earliest affected version is 0.8.9. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt