CVE-2017-1000477: Xmlbundle Project Xmlbundle

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

XMLBundle version 0.1.7 is vulnerable to XXE attacks which can result in denial of service attacks.

Affected products

• Xmlbundle Project Xmlbundle: version 0.1.7 only

Published 2018-01-03. Last modified 2026-06-17.