Threats tagged 'ghsa-748j-wm96-4wh5'

Apicurio Registry versions prior to 3.2.6 and from 3.3.0 up to but not including 3.3.1 contain a vulnerability allowing denial of service via XML entity expansion. An attacker with artifact-write permission can upload crafted XML documents with internal entity-expansion payloads (billion-laughs attack) causing CPU and memory exhaustion. The issue arises because DOCTYPE declarations are not disabled and FEATURE_SECURE_PROCESSING is not enabled, despite blocking external DTD and schema access. The JAXP default entity-expansion limit partially mitigates the impact. A fix is available in versions 3.2.6 and 3.3.1.