A small, innocuous-looking malformed XML string can crash an XML parser and take a service offline — that’s the practical reality behind CVE-2023-34411, a high‑severity denial‑of‑service vulnerability in the widely used Rust crate xml-rs that affected versions 0.8.9 through 0.8.13 and was fixed...