Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-26709

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-j6v2-mwxm-f952

py-xml XML External Entity Injection vulnerability py-xml v1.0 was discovered to contain an XML External Entity Injection (XXE) vulnerability which allows attackers to execute arbitrary code via a crafted XML file.

gitlab/pypi/py-xml/CVE-2020-26709

Improper Restriction of XML External Entity Reference py-xml v1.0 was discovered to contain an XML External Entity Injection (XXE) vulnerability which allows attackers to execute arbitrary code via a crafted XML file.