| Package | Affected versions | Patched versions |
|---|---|---|
| diving log | < 6.0.9 | 6.0.9 |
XXE in Diving Log 6.0 allows attackers to remotely view local files through a crafted dive.xml file that is mishandled during a Subsurface import.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free