tocsin

PyPI/fastfeedparser CVE-2026-39376: high 7.5, EPSS 0.33%

FastFeedParser is a high performance RSS, Atom and RDF parser. Prior to 0.5.10, when parse() fetches a URL that returns an HTML page containing a <meta http-equiv="refresh"> tag, it recursively calls

Action: Upgrade fastfeedparser to 0.5.10 or later.

pip install fastfeedparser==0.5.10

Affected

introducedfixedlast affected
00.5.10-

Fixed versions

0.5.10

Sources

CVE-2026-39376 · published · modified · JSON