CWE-776 Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses

Duplicate Advisory: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses (CWE-776)

Docling: Unsafe XML Entity Expansion in USPTO Patent Backend

fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limits

Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend

ArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated users

Ultimate Sitemap Parser (USP): XML Entity Expansion (Billion Laughs) DoS in XMLSitemapParser

Routinator crashes when encountering maliciously crafted RRDP XML files

Symfony's YAML Parser Vulnerable to Exponential Memory Allocation via Recursive Collection-Alias Expansion ("Billion Laughs")

Symfony hardened the parser when handling untrusted input

Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks

pypdf: Manipulated XMP metadata entity declarations can exhaust RAM

fast-xml-parser affected by numeric entity expansion bypassing all entity expansion limits (incomplete fix for CVE-2026-26278)

SVGO DoS through entity expansion in DOCTYPE (Billion Laughs)

XML Entity Expansion and Improper Input Validation in Kubernetes API server

fast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit)

Apache Tiles: Unvalidated input may lead to path traversal and XXE

REXML denial of service vulnerability

REXML has DoS condition when parsing malformed XML file

LlamaIndex has an XML Entity Expansion vulnerability in its sitemap parser

ebookmeta XML External Entity vulnerability

XML2Dict XML Entity Expansion Vulnerability

untangle vulnerable to XML Entity Expansion

ebookmeta XML External Entity vulnerability

Feedgen Vulnerable to XML Denial of Service Attacks