https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:01:31.370863+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-03604 bdu:2021-03604 2026-10-03T01:01:31.382271+00:00 bdu:2021-03604 https://cve.radiocsirt.org/vuln/cnvd-2019-36472 cnvd-2019-36472 2026-10-03T01:01:31.382311+00:00 cnvd-2019-36472 https://cve.radiocsirt.org/vuln/euvd-2026-58512 EUVD-2026-58512 2026-10-03T01:01:31.382327+00:00 EUVD-2026-58512 https://cve.radiocsirt.org/vuln/fkie_cve-2019-17626 fkie_cve-2019-17626 2026-10-03T01:01:31.382338+00:00

ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.

 https://cve.radiocsirt.org/vuln/ghsa-qpg2-vx7j-3869 GHSA-qpg2-vx7j-3869 — XML Injection in ReportLab 2026-10-03T01:01:31.382369+00:00

Affected: PyPI: reportlab

ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.

 https://cve.radiocsirt.org/vuln/gsd-2019-17626 gsd-2019-17626 2026-10-03T01:01:31.382393+00:00 gsd-2019-17626 https://cve.radiocsirt.org/vuln/oesa-2021-1281 OESA-2021-1281 — python-reportlab security update 2026-10-03T01:01:31.382404+00:00

Affected: openEuler:20.03-LTS-SP1: python-reportlab, openEuler:20.03-LTS-SP2: python-reportlab

The ReportLab Toolkit. An Open Source Python library for generating PDFs and graphics. Security Fix(es): ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with &apos;&lt;span color=&quot;&apos; followed by arbitrary Python code.(CVE-2019-17626)

 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0160-1 openSUSE-SU-2020:0160-1 — Security update for python-reportlab 2026-10-03T01:01:31.382429+00:00

Security update for python-reportlab

 https://cve.radiocsirt.org/vuln/pysec-2019-117 PYSEC-2019-117 2026-10-03T01:01:31.382446+00:00

Affected: PyPI: reportlab

ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.

 https://cve.radiocsirt.org/vuln/rhsa-2020:0197 RHSA-2020:0197 — Red Hat Security Advisory: python-reportlab security update 2026-10-03T01:01:31.382464+00:00

python-reportlab: code injection in colors.py allows attacker to execute code

 https://cve.radiocsirt.org/vuln/suse-su-2020:0324-1 SUSE-SU-2020:0324-1 — Security update for python-reportlab 2026-10-03T01:01:31.382480+00:00

Security update for python-reportlab

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-17626 UBUNTU-CVE-2019-17626 2026-10-03T01:01:31.382493+00:00

Affected: Ubuntu:16.04:LTS: python-reportlab, Ubuntu:18.04:LTS: python-reportlab

ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.