Search results

robustness: convert_to_unicode missing bounds check on prefixes array index

Status: Open.

#284 In cpan-authors/XML-Parser;

· toddr-bot opened on May 22, 2026

robustness: XML_LoadEncoding leaks RETVAL SV when croak fires on allocation failure

Status: Open.

#282 In cpan-authors/XML-Parser;

· toddr-bot opened on May 22, 2026

robustness: LWP external entity handler fetches content with no size limit

Status: Open.

#281 In cpan-authors/XML-Parser;

· toddr-bot opened on May 22, 2026

duplication: Stream.pm Start handler reimplements XML attribute escaping

Status: Open.

#280 In cpan-authors/XML-Parser;

· toddr-bot opened on May 22, 2026

duplication: expat_options filtering loop copy-pasted between parse() and parse_start()

Status: Open.

#279 In cpan-authors/XML-Parser;

· toddr-bot opened on May 22, 2026

Security: Default file entity handler allows arbitrary local file read via XXE

Status: Open.

#278 In cpan-authors/XML-Parser;

· toddr-bot opened on May 22, 2026

Security: Out-of-bounds heap read in convert_to_unicode via crafted encoding map

Status: Open.

#277 In cpan-authors/XML-Parser;

· toddr-bot opened on May 22, 2026

Security: Unbounded memory consumption via external entity content fetching

Status: Open.

#276 In cpan-authors/XML-Parser;

· toddr-bot opened on May 22, 2026

Security: Default external entity handler enables SSRF via arbitrary URL fetching

Status: Open.

#275 In cpan-authors/XML-Parser;

· toddr-bot opened on May 22, 2026