Tag

cve-2022-40152

Safeguard articles tagged "cve-2022-40152" — guides, analysis, and best practices for software supply chain and application security.

1 article

Security

CVE-2022-40152: Woodstox XML Parsing Denial of Service

CVE-2022-40152 lets malicious XML with deeply nested DTD content crash Woodstox-based parsers via stack overflow. Here is the root cause, affected versions, and how to remediate it.

Apr 9, 20255 min read