{"id":"CVE-2026-92987","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-92987","summary":"roxmltree through 0.21.1 Denial of Service via Quadratic Parsing","details":"roxmltree through 0.21.1 performs quadratic-time attribute and namespace validation during XML parsing without limits on attribute count. Attackers can craft XML documents with tens of thousands of attributes on a single element to consume excessive CPU time and cause denial of service.","published":"2026-09-17T14:22:10.913Z","modified":"2026-09-18T03:48:44.615759636Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":null,"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/92xxx/CVE-2026-92987.json"},{"type":"PACKAGE","url":"https://github.com/RazrFalcon/roxmltree"},{"type":"ARTICLE","url":"https://github.com/RazrFalcon/roxmltree/blob/v0.21.1/src/lib.rs#L751-L755"},{"type":"ARTICLE","url":"https://github.com/RazrFalcon/roxmltree/blob/v0.21.1/src/parse.rs#L1014-L1020"},{"type":"REPORT","url":"https://github.com/RazrFalcon/roxmltree/issues/153"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92987"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/roxmltree-through-0.21.1-denial-of-service-via-quadratic-parsing"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-09-18T03:48:44.615759636Z"}}