PyPI/py-xml CVE-2020-26709: high 7.5, EPSS 0.80%

py-xml XML External Entity Injection vulnerability

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-j6v2-mwxm-f952
• https://nvd.nist.gov/vuln/detail/CVE-2020-26709
• https://github.com/PinaeOS/py-xml/issues/2
• https://github.com/PinaeOS/py-xml
• https://github.com/pypa/advisory-database/tree/main/vulns/py-xml/PYSEC-2023-95.yaml

CVE-2020-26709 · published 2023-06-29T21:30:29Z · modified 2024-02-16T08:07:15.853904Z · JSON