{"id":4304431,"name":"xml-rs","ecosystem":"cargo","description":"An XML library in pure Rust","homepage":"https://lib.rs/crates/xml","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/kornelski/xml-rs","keywords_array":["parser","parsing","sax","writer","xml"],"namespace":null,"versions_count":80,"first_release_published_at":"2014-12-08T20:30:04.915Z","latest_release_published_at":"2025-08-25T14:33:50.889Z","latest_release_number":"1.0.0","last_synced_at":"2026-10-18T03:39:32.427Z","created_at":"2022-04-13T09:13:18.362Z","updated_at":"2026-10-18T09:35:22.071Z","registry_url":"https://crates.io/crates/xml-rs/","install_command":"cargo install xml-rs","documentation_url":"https://docs.rs/xml-rs/","metadata":{"categories":["parser-implementations"]},"repo_metadata":{"id":160121034,"uuid":"635073227","full_name":"kornelski/xml-rs","owner":"kornelski","description":"An XML library in Rust","archived":false,"fork":true,"pushed_at":"2026-09-19T21:22:21.000Z","size":1739,"stargazers_count":118,"open_issues_count":9,"forks_count":28,"subscribers_count":6,"default_branch":"main","last_synced_at":"2026-09-26T01:42:08.414Z","etag":null,"topics":["parser","rust","sax-parser","xml"],"latest_commit_sha":null,"homepage":"https://lib.rs/xml","language":"Rust","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"netvl/xml-rs","license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kornelski.png","metadata":{},"created_at":"2023-05-01T22:55:33.000Z","updated_at":"2026-09-19T21:22:26.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/kornelski/xml-rs","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/kornelski/xml-rs","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fxml-rs","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fxml-rs/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fxml-rs/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fxml-rs/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kornelski","download_url":"https://codeload.github.com/kornelski/xml-rs/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fxml-rs/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":341189360,"owners_count":37703448,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-26T02:00:06.440Z","response_time":102,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"kornelski","name":"Kornel","uuid":"72159","kind":"user","description":"Image compression, web performance.","email":"","website":"https://kornel.ski","location":"United Kingdom","twitter":null,"company":"@ImageOptim ","icon_url":"https://avatars.githubusercontent.com/u/72159?u=f25bf9f675b806b92a8e5083ce5d0b8f1d7708df\u0026v=4","repositories_count":360,"last_synced_at":"2024-04-14T01:17:52.516Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/kornelski","funding_links":[],"total_stars":13626,"followers":1832,"following":51,"created_at":"2022-11-02T16:24:04.538Z","updated_at":"2024-04-14T01:18:42.409Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kornelski","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kornelski/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-10-18T03:39:00.280Z","dependent_packages_count":383,"downloads":155218016,"downloads_period":"total","dependent_repos_count":15002,"rankings":{"downloads":0.27222014570124897,"dependent_repos_count":0.21509622911627188,"dependent_packages_count":0.21298052850201343,"stargazers_count":19.486307890858058,"forks_count":17.50178071468367,"docker_downloads_count":0.23272706756842526,"average":6.3201854294049475},"purl":"pkg:cargo/xml-rs","advisories":[{"uuid":"GSA_kwCzR0hTQS03Z2Y3LWp2NjUtd2ptaM4AAzoL","url":"https://github.com/advisories/GHSA-7gf7-jv65-wjmh","title":"xml-rs vulnerable to denial of service via invalid token in XML document","description":"The xml-rs crate \u003e= 0.8.9 and \u003c 0.8.14 for Rust and Crab allows a denial of service (panic) via an invalid \u003c! token (such as \u003c!DOCTYPEs/%\u003c!A nesting) in an XML document.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2023-06-05T06:30:15.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-34411","https://github.com/netvl/xml-rs/pull/226","https://github.com/00xc/xml-rs/commit/0f084d45aa53e4a27476961785f59f2bd7d59a9f","https://github.com/netvl/xml-rs/commit/c09549a187e62d39d40467f129e64abf32efc35c","https://github.com/netvl/xml-rs/compare/0.8.13...0.8.14","https://github.com/netvl/xml-rs/commit/014d808be900c85a0afc5ccdfe668be040d175aa","https://github.com/advisories/GHSA-7gf7-jv65-wjmh"],"source_kind":"github","identifiers":["GHSA-7gf7-jv65-wjmh","CVE-2023-34411"],"repository_url":"https://github.com/netvl/xml-rs","blast_radius":0.0,"created_at":"2023-06-06T03:03:19.066Z","updated_at":"2026-10-18T08:25:27.255Z","epss_percentage":0.01162,"epss_percentile":0.66557,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03Z2Y3LWp2NjUtd2ptaM4AAzoL","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS03Z2Y3LWp2NjUtd2ptaM4AAzoL","packages":[{"ecosystem":"cargo","package_name":"xml-rs","versions":[{"first_patched_version":"0.8.14","vulnerable_version_range":"\u003e= 0.8.9, \u003c 0.8.14"}],"purl":"pkg:cargo/xml-rs"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03Z2Y3LWp2NjUtd2ptaM4AAzoL/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/cargo/xml-rs","docker_dependents_count":155,"docker_downloads_count":32283030,"usage_url":"https://repos.ecosyste.ms/usage/cargo/xml-rs","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/cargo/xml-rs/dependencies","status":null,"funding_links":[],"critical":true,"issue_metadata":{"last_synced_at":"2026-10-17T02:40:26.900Z","issues_count":34,"pull_requests_count":32,"avg_time_to_close_issue":2520872.4583333335,"avg_time_to_close_pull_request":2887591.4137931033,"issues_closed_count":24,"pull_requests_closed_count":29,"pull_request_authors_count":16,"issue_authors_count":19,"avg_comments_per_issue":1.4411764705882353,"avg_comments_per_pull_request":0.84375,"merged_pull_requests_count":22,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":7,"past_year_pull_requests_count":5,"past_year_avg_time_to_close_issue":378829.8,"past_year_avg_time_to_close_pull_request":226704.4,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":5,"past_year_pull_request_authors_count":1,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":1.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":4,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fxml-rs/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/packages/xml-rs/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/packages/xml-rs/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/packages/xml-rs/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/packages/xml-rs/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/packages/xml-rs/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/packages/xml-rs/codemeta","maintainers":[{"uuid":"33","login":"tomaka","name":"Pierre Krieger","email":null,"url":"https://github.com/tomaka","packages_count":81,"html_url":"https://crates.io/users/tomaka","role":null,"created_at":"2022-11-08T03:46:39.482Z","updated_at":"2022-11-08T03:46:39.482Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/maintainers/tomaka/packages"},{"uuid":"988","login":"kornelski","name":"Kornel","email":null,"url":"https://github.com/kornelski","packages_count":132,"html_url":"https://crates.io/users/kornelski","role":null,"created_at":"2023-04-09T20:40:54.375Z","updated_at":"2023-04-09T20:40:54.375Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/maintainers/kornelski/packages"},{"uuid":"193","login":"netvl","name":"Vladimir Matveev","email":null,"url":"https://github.com/netvl","packages_count":13,"html_url":"https://crates.io/users/netvl","role":null,"created_at":"2022-11-08T03:46:39.490Z","updated_at":"2022-11-08T03:46:39.490Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/crates.io/maintainers/netvl/packages"}]}