Security Advisories (1)
CVE-2012-1102 (2021-07-09)

It was discovered that the XML::Atom Perl module before version 0.39 did not disable external entities when parsing XML from potentially untrusted sources. This may allow attackers to gain read access to otherwise protected resources, depending on how the library is used.

NAME

XML::Atom - Atom feed and API implementation

SYNOPSIS

use XML::Atom;

DESCRIPTION

Atom is a syndication, API, and archiving format for weblogs and other data. XML::Atom implements the feed format as well as a client for the API.

LICENSE

XML::Atom is free software; you may redistribute it and/or modify it under the same terms as Perl itself.

AUTHOR & COPYRIGHT

Except where otherwise noted, XML::Atom is Copyright 2003-2005 Benjamin Trott, cpan@stupidfool.org. All rights reserved.

CO-MAINTAINER

Tatsuhiko Miyagawa <miyagawa@bulknews.net>