CVE-2021-25951

Name of the Vulnerable Software and Affected Versions XML2Dict version 0.2.2

Description The issue is an XXE vulnerability that allows an attacker to cause a denial of service. The parse function does not properly restrict recursive entity references.

Recommendations For XML2Dict version 0.2.2, consider disabling the parse function until a patch is available to prevent potential denial of service attacks. Restrict access to the XML2Dict module to minimize the risk of exploitation.