https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:31:54.281319+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:5790 ALSA-2023:5790 — Important: python-reportlab security update 2026-10-03T10:31:54.512542+00:00

Affected: AlmaLinux:8: python3-reportlab

Python-reportlab is a library used for generation of PDF documents.

Security Fix(es):

* python-reportlab: code injection in paraparser.py allows code execution (CVE-2019-19450)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-07027 bdu:2023-07027 2026-10-03T10:31:54.512608+00:00 bdu:2023-07027 https://cve.radiocsirt.org/vuln/euvd-2026-59297 EUVD-2026-59297 2026-10-03T10:31:54.512626+00:00 EUVD-2026-59297 https://cve.radiocsirt.org/vuln/fkie_cve-2019-19450 fkie_cve-2019-19450 2026-10-03T10:31:54.512639+00:00

paraparser in ReportLab before 3.5.31 allows remote code execution because start_unichar in paraparser.py evaluates untrusted user input in a unichar element in a crafted XML document with '<unichar code="' followed by arbitrary Python code, a similar issue to CVE-2019-17626.

 https://cve.radiocsirt.org/vuln/ghsa-pj98-2xf6-cff5 GHSA-pj98-2xf6-cff5 — ReportLab vulnerable to remote code execution via paraparser 2026-10-03T10:31:54.512663+00:00

Affected: PyPI: reportlab

paraparser in ReportLab before 3.5.31 allows remote code execution because start_unichar in paraparser.py evaluates untrusted user input in a unichar element in a crafted XML document with '<unichar code="' followed by arbitrary Python code, a similar issue to CVE-2019-17626.

 https://cve.radiocsirt.org/vuln/gsd-2019-19450 gsd-2019-19450 2026-10-03T10:31:54.512685+00:00 gsd-2019-19450 https://cve.radiocsirt.org/vuln/pysec-2026-522 PYSEC-2026-522 — ReportLab vulnerable to remote code execution via paraparser 2026-10-03T10:31:54.512697+00:00

Affected: PyPI: reportlab

paraparser in ReportLab before 3.5.31 allows remote code execution because start_unichar in paraparser.py evaluates untrusted user input in a unichar element in a crafted XML document with '<unichar code="' followed by arbitrary Python code, a similar issue to CVE-2019-17626.

 https://cve.radiocsirt.org/vuln/rhsa-2023:5616 RHSA-2023:5616 — Red Hat Security Advisory: python-reportlab security update 2026-10-03T10:31:54.512717+00:00

python-reportlab: code injection in paraparser.py allows code execution

 https://cve.radiocsirt.org/vuln/rhsa-2023:5786 RHSA-2023:5786 — Red Hat Security Advisory: python-reportlab security update 2026-10-03T10:31:54.512734+00:00

python-reportlab: code injection in paraparser.py allows code execution

 https://cve.radiocsirt.org/vuln/suse-su-2023:3972-1 SUSE-SU-2023:3972-1 — Security update for python-reportlab 2026-10-03T10:31:54.512749+00:00

Security update for python-reportlab

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-19450 UBUNTU-CVE-2019-19450 2026-10-03T10:31:54.512763+00:00

Affected: Ubuntu:16.04:LTS: python-reportlab, Ubuntu:18.04:LTS: python-reportlab

paraparser in ReportLab before 3.5.31 allows remote code execution because start_unichar in paraparser.py evaluates untrusted user input in a unichar element in a crafted XML document with '<unichar code="' followed by arbitrary Python code, a similar issue to CVE-2019-17626.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2629 WID-SEC-W-2023-2629 — Red Hat Enterprise Linux (python-reportlab): Schwachstelle ermöglicht Codeausführung 2026-10-03T10:31:54.512791+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux in der Komponente "python-reportlab" ausnutzen, um beliebigen Programmcode auszuführen.