CVE-2021-42859

7.5 highEPSS 1.0%

High (7.5) in mini-xml project mini-xml. EPSS 1.0% chance of exploitation in the next 30 days.

A memory leak issue was discovered in Mini-XML v3.2 that could cause a denial of service. NOTE: testing reports are inconsistent, with some testers seeing the issue in both the 3.2 release and in the October 2021 development code, but others not seeing the issue in the 3.2 release

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
CWE: CWE-772
Published: 2022-05-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mini-xml_project:mini-xml

References

https://github.com/michaelrsweet/mxml/issues/286
https://github.com/michaelrsweet/mxml/issues/286

Check your stack JSON