{"action":"Upgrade weixin-python to 0.5.5 or later.","affected":[{"fixed":"0.5.5","introduced":"0"}],"component":"weixin-python","cve_ids":["CVE-2018-25082"],"ecosystem":"PyPI","epss":0.00782,"exploited":false,"fixed_versions":["0.5.5"],"ghsa_id":"GHSA-h384-ph77-3699","id":"tcs_01M5KHC74TM53ZD71SMCXWNST2","modified_at":"2026-07-01T20:23:11.940577Z","published_at":"2026-06-29T11:50:42.538947Z","references":["https://osv.dev/vulnerability/PYSEC-2026-572","https://nvd.nist.gov/vuln/detail/CVE-2018-25082","https://github.com/zwczou/weixin-python/pull/30","https://github.com/zwczou/weixin-python/commit/e54abadc777715b6dcb545c13214d1dea63df6c9","https://github.com/zwczou/weixin-python","https://github.com/zwczou/weixin-python/releases/tag/v0.5.5","https://vuldb.com/?ctiid.223403","https://vuldb.com/?id.223403","https://pypi.org/project/weixin-python","https://github.com/advisories/GHSA-h384-ph77-3699"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"PYSEC-2026-572","url":"https://osv.dev/vulnerability/PYSEC-2026-572"}],"summary":"weixin-python XML External Entity vulnerability"}