PyPI/mofh: medium
mofh Vulnerable to Improper Restriction of XML External Entity Reference
Action: Upgrade mofh to 1.0.1 or later.
pip install mofh==1.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.1 | - |
Fixed versions
| 1.0.1 |
Sources
- osv: GHSA-7r9x-qrpr-3cxw
- https://github.com/Wallvon/mofh/security/advisories/GHSA-7r9x-qrpr-3cxw
- https://github.com/Wallvon/mofh/commit/da0d33cfd368e2f237ab28bf7a7f00e3d281005a
- https://github.com/Wallvon/mofh
- https://www.acunetix.com/vulnerabilities/web/xml-quadratic-blowup-denial-of-service-attack
published · modified · JSON