CVE-2021-3541: Improper Restriction of Recursive Entity References in DTDs (XML Entity Expansion)
(updated )
A flaw was found in libxml2. By exploiting an exponential entity expansion attack its possible bypassing all existing protection mechanisms and lead to a denial of service.
References
Detect and mitigate CVE-2021-3541 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →