{"id":"CLEANSTART-2023-HB82329","summary":"It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML data","details":"Security vulnerability affects the prosody package. It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML data.","modified":"2026-10-31T15:46:11.832925420Z","published":"2026-10-31T14:35:48.649172Z","upstream":["CVE-2022-0217"],"database_specific":{},"references":[{"type":"ADVISORY","url":"https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2023/CLEANSTART-2023-HB82329.json"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2022-0217"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0217"}],"affected":[{"package":{"name":"prosody","ecosystem":"CleanStart","purl":"pkg:apk/cleanstart/prosody"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.12-r0"}]}],"database_specific":{"source":"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2023/CLEANSTART-2023-HB82329.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}