Security Advisories (1)
CVE-2012-1102 (2021-07-09)

It was discovered that the XML::Atom Perl module before version 0.39 did not disable external entities when parsing XML from potentially untrusted sources. This may allow attackers to gain read access to otherwise protected resources, depending on how the library is used.

Changes for version 0.08

  • Added XML::Atom::Feed::language method, which returns the language of the feed (from 'xml:lang').
  • Added XML::Atom::Feed::author, which returns a XML::Atom::Person object representing the <author> element.
  • Remove the default: namespace prefix that XML::LibXML adds inside <content mode="xml"> elements.
  • Use LWP::Authen::Wsse module for WSSE authentication when in REST mode, which handles redirects properly.

Modules

Atom feed and API implementation
A client for the Atom API
Atom entry
Atom feed
Author or contributor object
A server for the Atom API
Utility functions

Provides

in lib/XML/Atom/Client.pm
in lib/XML/Atom/Content.pm
in lib/XML/Atom/ErrorHandler.pm
in lib/XML/Atom/Link.pm
in lib/XML/Atom.pm
in lib/XML/Atom/Thing.pm