CVE advisoryCRITICAL
CVE-2017-7375
libxml2 Remote XML Entity Inclusion Vulnerability
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A flaw in the libxml2 software library allows remote XML entity inclusion, potentially exposing local files or network content when certain parser flags are not enabled. This could increase the attack surface and reveal sensitive information, depending on how the library is integrated and configured within affected sys