{"cvss":5.3,"datePublished":"2024-03-10T10:00:00Z","dateUpdated":"2024-03-15T18:00:00Z","description":"An R package on CRAN is vulnerable to XML injection via untrusted input deserialization.","id":"CRAN-2024-001","metrics":{"cvssMetricV31":[{"cvssData":{"baseScore":5.3,"baseSeverity":"MEDIUM","version":"3.1"}}]},"severity":"MEDIUM","source":"osv_cran","title":"CRAN: R Package XML Injection"}