Security Advisories (1)
CVE-2012-1102 (2021-07-09)

It was discovered that the XML::Atom Perl module before version 0.39 did not disable external entities when parsing XML from potentially untrusted sources. This may allow attackers to gain read access to otherwise protected resources, depending on how the library is used.

Changes for version 0.03

  • Added XML::Atom::Author to represent author or contributor, with accessors for name, email, URL, etc.
  • Updated XML::Atom::API per the 08 API spec:
    • Removed searchEntries and replaced it with getFeed
    • Removed introspection and replaced it with URI parameters to createEntry and getFeed (introspection will be added back in once it is more locked down)
  • Added support for easily adding <link> tags to feed or entry (eg XML::Atom::Feed::add_link) and getting <link> tags from feed or entry (eg XML::Atom::Feed::get_links).
  • Fixed XML::Atom::Thing::get to return undef when an element is not found in the object at all (it used to return the empty string).

Modules

Atom feed and API implementation
A client for the Atom API
Author or contributor object
Atom entry
Atom feed
Utility functions

Provides

in lib/XML/Atom/ErrorHandler.pm
in lib/XML/Atom.pm
in lib/XML/Atom/Thing.pm