{"action":"Upgrade weixin-python to 0.5.5 or later.","affected":[{"fixed":"0.5.5","introduced":"0"}],"component":"weixin-python","cve_ids":["CVE-2018-25082"],"ecosystem":"PyPI","epss":0.00782,"exploited":false,"fixed_versions":["0.5.5"],"ghsa_id":"GHSA-h384-ph77-3699","id":"tcs_01M5KFJMBNHT1NQVXRCGFFV7NQ","modified_at":"2026-06-29T12:26:36.413081801Z","published_at":"2023-03-21T18:30:19Z","references":["https://osv.dev/vulnerability/GHSA-h384-ph77-3699","https://nvd.nist.gov/vuln/detail/CVE-2018-25082","https://github.com/zwczou/weixin-python/pull/30","https://github.com/zwczou/weixin-python/commit/e54abadc777715b6dcb545c13214d1dea63df6c9","https://github.com/zwczou/weixin-python","https://github.com/zwczou/weixin-python/releases/tag/v0.5.5","https://vuldb.com/?ctiid.223403","https://vuldb.com/?id.223403"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-h384-ph77-3699","url":"https://osv.dev/vulnerability/GHSA-h384-ph77-3699"}],"summary":"weixin-python XML External Entity vulnerability"}