Security Advisories (1)
CVE-2012-1102 (2021-07-09)

It was discovered that the XML::Atom Perl module before version 0.39 did not disable external entities when parsing XML from potentially untrusted sources. This may allow attackers to gain read access to otherwise protected resources, depending on how the library is used.

NAME

XML::Atom::Util - Utility functions

SYNOPSIS

use XML::Atom::Util qw( iso2dt );
my $dt = iso2dt($entry->issued);

USAGE

iso2dt($iso)

Transforms the ISO-8601 date $iso into a DateTime object and returns the DateTime object.

encode_xml($str)

Encodes characters with special meaning in XML into entities and returns the encoded string.

AUTHOR & COPYRIGHT

Please see the XML::Atom manpage for author, copyright, and license information.