CVE-2025-11059
2 advisories.
PyPI/xml2rfc CVE-2025-11059: high
xml2rfc is vulnerable to arbitrary file reads through prepped files
Action: Upgrade xml2rfc to 3.30.2 or later.
pip install xml2rfc==3.30.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.30.2 | - |
Fixed versions
| 3.30.2 |
Sources
- osv: GHSA-9mv7-3c64-mmqw
- https://github.com/ietf-tools/xml2rfc/security/advisories/GHSA-9mv7-3c64-mmqw
- https://github.com/ietf-tools/xml2rfc/commit/73fb1c91fc62ac540bb6bd24f982f2becf84c1b0
- https://github.com/ietf-tools/xml2rfc
- https://github.com/ietf-tools/xml2rfc/releases/tag/v3.30.2
CVE-2025-11059 · published · modified · JSON
PyPI/xml2rfc CVE-2025-11059: unknown
xml2rfc is vulnerable to arbitrary file reads through prepped files
Action: Upgrade xml2rfc to 3.30.2 or later.
pip install xml2rfc==3.30.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.30.2 | - |
Fixed versions
| 3.30.2 |
Sources
- osv: PYSEC-2026-2057
- https://github.com/ietf-tools/xml2rfc/security/advisories/GHSA-9mv7-3c64-mmqw
- https://github.com/ietf-tools/xml2rfc/commit/73fb1c91fc62ac540bb6bd24f982f2becf84c1b0
- https://github.com/ietf-tools/xml2rfc
- https://github.com/ietf-tools/xml2rfc/releases/tag/v3.30.2
- https://pypi.org/project/xml2rfc
- https://github.com/advisories/GHSA-9mv7-3c64-mmqw
- https://nvd.nist.gov/vuln/detail/CVE-2025-11059
CVE-2025-11059 · published · modified · JSON