Most recent entries from all

EUVD-2026-105520

2026-10-03T02:32:56.823487+00:00

EUVD-2026-105520

fkie_cve-2013-1665

2026-10-03T02:32:56.823530+00:00

The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) attack.

GHSA-x64m-686f-fmm3 — XML External Entity (XXE) in Django

2026-10-03T02:32:56.823565+00:00

Affected: PyPI: Django

The XML libraries for Python as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) attack.

gsd-2013-1665

2026-10-03T02:32:56.823592+00:00

gsd-2013-1665

PYSEC-2026-802 — XML External Entity (XXE) in Django

2026-10-03T02:32:56.823605+00:00

Affected: PyPI: django

RHSA-2013:0596 — Red Hat Security Advisory: openstack-keystone security, bug fix, and enhancement update

2026-10-03T02:32:56.823624+00:00

Keystone: EC2-style authentication accepts disabled user/tenants bindings: Internal entity expansion in Python XML libraries inflicts DoS vulnerabilities bindings: External entity expansion in Python XML libraries inflicts potential security flaws and DoS vulnerabilities