{"action":"Upgrade petl to 1.6.8 or later.","affected":[{"fixed":"1.6.8","introduced":"0"}],"component":"petl","cve_ids":["CVE-2020-29128"],"ecosystem":"PyPI","epss":0.02323,"exploited":false,"fixed_versions":["1.6.8"],"ghsa_id":"GHSA-f5gc-p5m3-v347","id":"tcs_01M5KFEHB0F52FKCT81FXDSJ2N","modified_at":"2026-09-10T03:49:00.212553421Z","published_at":"2020-12-02T18:28:30Z","references":["https://osv.dev/vulnerability/GHSA-f5gc-p5m3-v347","https://github.com/petl-developers/petl/security/advisories/GHSA-f5gc-p5m3-v347","https://github.com/petl-developers/petl/issues/526","https://github.com/petl-developers/petl/pull/527","https://github.com/petl-developers/petl/commit/07420ef8463cc387aea84e2d6241cf556574e2a5","https://github.com/nvn1729/advisories/blob/master/cve-2020-29128.md","https://github.com/petl-developers/petl","https://github.com/petl-developers/petl/compare/v1.6.7...v1.6.8","https://github.com/petl-developers/petl/releases/tag/v1.6.8","https://github.com/pypa/advisory-database/tree/main/vulns/petl/PYSEC-2020-75.yaml","https://owasp.org/www-community/vulnerabilities/XML_External_Entity_(XXE)_Processing","https://petl.readthedocs.io/en/stable/changes.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-f5gc-p5m3-v347","url":"https://osv.dev/vulnerability/GHSA-f5gc-p5m3-v347"}],"summary":"XXE in petl"}