Tag

woodstox

Safeguard articles tagged "woodstox" — guides, analysis, and best practices for software supply chain and application security.

1 article

Security

CVE-2022-40152: Woodstox XML Parsing Denial of Service

CVE-2022-40152 lets malicious XML with deeply nested DTD content crash Woodstox-based parsers via stack overflow. Here is the root cause, affected versions, and how to remediate it.

Apr 9, 20255 min read