tocsin

Debian/python-scrapy: medium 6.5

A Regular Expression Denial of Service (ReDoS) vulnerability exists in the XMLFeedSpider class of the scrapy/scrapy project, specifically in the parsing of XML content. By crafting malicious XML conte

Action: Upgrade python-scrapy to 2.11.1-1 or later.

Affected

introducedfixedlast affected
02.11.1-1-

Fixed versions

2.11.1-1

Sources

published · modified · JSON