Search for packages
| purl | pkg:pypi/untangle@1.2.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-9y5d-u3us-uuc4 | untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts XML external entity references. By exploiting this vulnerability, a remote unauthenticated attacker may read the contents of local files. |
CVE-2022-31471
GHSA-f83q-2cp7-qrjg PYSEC-2022-244 |
| VCID-bnwk-w5a8-8fe4 | untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts recursive entity references in DTDs. By exploiting this vulnerability, a remote unauthenticated attacker may cause a denial-of-service (DoS) condition on the server where the product is running. |
CVE-2022-33977
GHSA-7xr3-6ggc-wc9p PYSEC-2022-243 |