VulnerableCode Package Details - pkg:pypi/reportlab@2.7

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:pypi/reportlab@2.7

Essentials
History (10)

purl	pkg:pypi/reportlab@2.7

Next non-vulnerable version	3.6.13
Latest non-vulnerable version	3.6.13
Risk	4.5

Vulnerabilities affecting this package (5)

Vulnerability	Summary	Fixed by
VCID-bv9e-c8dj-3ubd Aliases: CVE-2019-17626 GHSA-qpg2-vx7j-3869 PYSEC-2019-117		3.5.28 Affected by 3 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-dt9j-n7rb-wbeq Aliases: PYSEC-2019-47	ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.	3.5.28 Affected by 3 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-eepb-3w8v-s3dq Aliases: CVE-2020-28463 GHSA-mpvw-25mg-59vx PYSEC-2021-146 SNYK-PYTHON-REPORTLAB-1022145		3.5.55 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-f79h-qdyu-jyev Aliases: CVE-2023-33733 GHSA-9q9m-c65c-37pq		3.6.13 Affected by 0 other vulnerabilities.
VCID-wm1p-dzme-1fcx Aliases: CVE-2019-19450 GHSA-pj98-2xf6-cff5		3.5.31 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-06-13T08:24:48.432806+00:00	GHSA Importer	Affected by	VCID-eepb-3w8v-s3dq	https://github.com/advisories/GHSA-mpvw-25mg-59vx	38.6.0
2026-06-12T19:06:19.267444+00:00	GitLab Importer	Affected by	VCID-wm1p-dzme-1fcx	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/reportlab/CVE-2019-19450.yml	38.6.0
2026-06-12T18:56:20.196322+00:00	GitLab Importer	Affected by	VCID-f79h-qdyu-jyev	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/reportlab/CVE-2023-33733.yml	38.6.0
2026-06-12T18:20:30.427312+00:00	GitLab Importer	Affected by	VCID-bv9e-c8dj-3ubd	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/reportlab/CVE-2019-17626.yml	38.6.0
2026-06-12T17:36:05.104314+00:00	GitLab Importer	Affected by	VCID-eepb-3w8v-s3dq	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/reportlab/CVE-2020-28463.yml	38.6.0
2026-06-12T04:05:17.830532+00:00	Pypa Importer	Affected by	VCID-eepb-3w8v-s3dq	https://github.com/pypa/advisory-database/blob/main/vulns/reportlab/PYSEC-2021-146.yaml	38.6.0
2026-06-12T04:02:58.869380+00:00	Pypa Importer	Affected by	VCID-bv9e-c8dj-3ubd	https://github.com/pypa/advisory-database/blob/main/vulns/reportlab/PYSEC-2019-117.yaml	38.6.0
2026-06-11T20:47:15.813975+00:00	PyPI Importer	Affected by	VCID-eepb-3w8v-s3dq	https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip	38.6.0
2026-06-11T20:44:47.693708+00:00	PyPI Importer	Affected by	VCID-bv9e-c8dj-3ubd	https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip	38.6.0
2026-06-11T20:44:47.516143+00:00	PyPI Importer	Affected by	VCID-dt9j-n7rb-wbeq	https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip	38.6.0