PyPI/xml2rfc CVE-2025-11058: high
xml2rfc has an arbitrary file read vulnerability
Action: Upgrade xml2rfc to 3.30.1 or later.
pip install xml2rfc==3.30.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.30.1 | - |
Fixed versions
| 3.30.1 |
Sources
- osv: GHSA-cfmv-h8fx-85m7
- https://github.com/ietf-tools/xml2rfc/security/advisories/GHSA-cfmv-h8fx-85m7
- https://github.com/ietf-tools/xml2rfc/commit/f2b245bc0aeeac0667c8f74e976c466c5991f0e4
- https://github.com/ietf-tools/xml2rfc
CVE-2025-11058 · published · modified · JSON