01 Record

CVE-2026-47079

Round-trip Corruption via Improper Entity Escaping in xml_builder

LowPUBLISHEDCNA: EEF

Base score2.1 CVSS v4.0CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N

02 Description

Round-trip Corruption via Improper Entity Escaping in xml_builder

Published

2026-08-21 09:52Z15 HR AGO

Last updated

2026-08-21 12:19Z13 HR AGO

Reserved

2026-05-18

Assigning CNA

EEF

Record state

PUBLISHED

Severity

Low (CVSS 2.1)

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N

Weaknesses

SSVC decision

ExploitationpocAutomatablenoTechnical Impactpartial

Data version

5.2

Document digest

4d75e0ecb4737fe840bed8cecf4901c469ff9fb8313d22538d331d200c322882

VendorProductVersionsPlatforms

joshnussxml_builder0.0.6 to < 2.4.1, aae31e6e8ac837bcbb8afb816c0d14324b5cfe2b to < c3390e2046ec297b3bb8c30d5779cdfd6508c275—