PyPI/weixin-python CVE-2018-25082: critical 9.8, EPSS 0.78%
weixin-python XML External Entity vulnerability
Action: Upgrade weixin-python to 0.5.5 or later.
pip install weixin-python==0.5.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.5 | - |
Fixed versions
| 0.5.5 |
Sources
- osv: GHSA-h384-ph77-3699
- https://nvd.nist.gov/vuln/detail/CVE-2018-25082
- https://github.com/zwczou/weixin-python/pull/30
- https://github.com/zwczou/weixin-python/commit/e54abadc777715b6dcb545c13214d1dea63df6c9
- https://github.com/zwczou/weixin-python
- https://github.com/zwczou/weixin-python/releases/tag/v0.5.5
- https://vuldb.com/?ctiid.223403
- https://vuldb.com/?id.223403
CVE-2018-25082 · published · modified · JSON