Security Advisories (1)
CVE-2012-1102 (2021-07-09)

It was discovered that the XML::Atom Perl module before version 0.39 did not disable external entities when parsing XML from potentially untrusted sources. This may allow attackers to gain read access to otherwise protected resources, depending on how the library is used.

Changes for version 0.31

  • Update Content-Type in XML::Atom::Client when the entity's version >= 1.0 (Thanks to David Steinbrunner RT 39801)

Modules

Atom feed and API implementation
A client for the Atom API
Atom entry
Atom feed
Author or contributor object
A server for the Atom API
Utility functions

Provides

in lib/XML/Atom/Client.pm
in lib/XML/Atom/Base.pm
in lib/XML/Atom/Category.pm
in lib/XML/Atom/Content.pm
in lib/XML/Atom/ErrorHandler.pm
in lib/XML/Atom/Link.pm
in lib/XML/Atom.pm
in lib/XML/Atom/Thing.pm