sweet_xml

0.7.5

0.7.5 0.7.4 0.7.3 0.7.2 0.7.1 0.7.0 0.6.6 0.6.5 0.6.4 0.6.3 0.6.2 0.6.1 0.6.0 0.5.1 0.5.0 0.4.0 0.3.0 0.2.1 0.2.0 0.1.1 0.1.0

A sweet wrapper of :xmerl to help query XML docs

HexDocs Report package

Current section

1 Advisory

Jump to

Readme 21 Versions 0 Dependencies 227 Dependants 1 Advisory Files Activity

GHSA-qpmc-wprv-x746 CVE-2019-15160

Inline DTD allows XML bomb attack

April 12, 2022

CVSS

7.5 / 10.0 High

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Versions

< 0.7.0

References

https://github.com/kbrw/sweet_xml
https://github.com/kbrw/sweet_xml/issues/71
https://hex.pm/packages/sweet_xml
https://nvd.nist.gov/vuln/detail/CVE-2019-15160

Checksum

Dependency Config

mix.exs

rebar.config

Gleam

erlang.mk

Package Details

Downloads Last 30 days, all versions

this version

8 027 359

yesterday

31 555

last 7 days

163 565

all time

71 396 345

Last Updated

Jan 07, 2025

License

MIT

Build Tools

mix

Publisher

kbrw

Owners

gniquil
kbrw

Operator	Description	Example
name:	Match package name. Supports * wildcards and repo/package form	name:phx* or name:hexpm/phoenix
description:	Full-text search of package descriptions	description:auth
depends:	Packages depending on a given package. Supports repo:package form	depends:ecto or depends:hexpm:ecto
build_tool:	Filter by build tool	build_tool:mix
updated_after:	Packages updated after an ISO8601 datetime	updated_after:2025-01-01T00:00:00Z
extra:	Match custom metadata (key,value). Nested keys are separated by commas	extra:license,MIT

sweet_xml

Checksum

Dependency Config

Package Details

Links

Owners

Search filters