Search for packages
Package details: pkg:pypi/lxml@4.7.0
purl pkg:pypi/lxml@4.7.0
Tags Ghost
Next non-vulnerable version 4.9.1
Latest non-vulnerable version 4.9.1
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-gufu-nks1-aaag
Aliases:
CVE-2022-2309
GHSA-wrxv-2j5q-m38w
PYSEC-2022-230
NULL Pointer Dereference in lxml
4.9.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-01-17T07:57:25.077881+00:00 PyPI Importer Affected by VCID-gufu-nks1-aaag None 35.1.0
2024-09-18T12:26:02.901679+00:00 Pypa Importer Affected by VCID-gufu-nks1-aaag https://github.com/pypa/advisory-database/blob/main/vulns/lxml/PYSEC-2022-230.yaml 34.0.1
2024-09-17T23:15:23.853748+00:00 PyPI Importer Affected by VCID-gufu-nks1-aaag https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 34.0.1
2024-01-03T21:47:08.405691+00:00 GitLab Importer Affected by VCID-gufu-nks1-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/lxml/CVE-2022-2309.yml 34.0.0rc1
2024-01-03T21:47:07.404923+00:00 GitLab Importer Affected by VCID-gufu-nks1-aaag None 34.0.0rc1
2024-01-03T18:52:00.670911+00:00 PyPI Importer Affected by VCID-gufu-nks1-aaag https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 34.0.0rc1
2024-01-03T18:27:42.904138+00:00 Pypa Importer Affected by VCID-gufu-nks1-aaag https://github.com/pypa/advisory-database/blob/main/vulns/lxml/PYSEC-2022-230.yaml 34.0.0rc1