description: c3p0 version < 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration.
problem types: XML Entity Expansion (CWE-776)
affected:
{
product: c3p0
vendor: n/a
versions:
status: affected, version: before 0.9.5.4
}