xml_builder (Hex)
Advisories
3
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 2.4.1 or later clears every advisory below that has a fix.
Upgrade commands
mix
{:xml_builder, "~> 2.4.1"} # then: mix deps.update xml_builderKnown vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| EEF-CVE-2026-47079 Round-trip Corruption via Improper Entity Escaping in xml_builder |
Not rated yet EPSS 0.19% |
>= 0.0.6, < 2.4.1 | 2.4.1 |
| EEF-CVE-2026-48590 Element and Attribute Names Injected Verbatim into XML Output in xml_builder |
Not rated yet EPSS 0.23% |
>= 0.0.1, < 2.4.1 | 2.4.1 |
| EEF-CVE-2026-47080 CDATA Section Breakout via Unsanitised ]]> in xml_builder |
Not rated yet EPSS 0.22% |
>= 0.0.7, < 2.4.1 | 2.4.1 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor