PyPI/ultimate-sitemap-parser: high 7.5
Ultimate Sitemap Parser (USP): XML Entity Expansion (Billion Laughs) DoS in XMLSitemapParser
Action: Upgrade ultimate-sitemap-parser to 1.8.1 or later.
pip install ultimate-sitemap-parser==1.8.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.1 | - |
Fixed versions
| 1.8.1 |
Sources
- osv: GHSA-p5wc-9w9r-m232
- https://github.com/GateNLP/ultimate-sitemap-parser/security/advisories/GHSA-p5wc-9w9r-m232
- https://github.com/GateNLP/ultimate-sitemap-parser
published · modified · JSON