https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T06:37:45.889125+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-198649 EUVD-2026-198649 2026-10-04T06:37:46.017223+00:00 EUVD-2026-198649 https://cve.radiocsirt.org/vuln/fkie_cve-2024-37388 fkie_cve-2024-37388 2026-10-04T06:37:46.017275+00:00

An XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of lxml before v4.9.1 allows attackers to access sensitive information or cause a Denial of Service (DoS) via crafted XML input.

 https://cve.radiocsirt.org/vuln/ghsa-hx54-pf28-7xch GHSA-hx54-pf28-7xch — ebookmeta XML External Entity vulnerability 2026-10-04T06:37:46.017323+00:00

Affected: PyPI: ebookmeta

An XML External Entity (XXE) vulnerability in the `ebookmeta.get_metadata` function via lxml dependency allows attackers to access sensitive information or cause a Denial of Service (DoS) via crafted XML input.

 https://cve.radiocsirt.org/vuln/oesa-2024-1749 OESA-2024-1749 — python-lxml security update 2026-10-04T06:37:46.017372+00:00

Affected: openEuler:22.03-LTS-SP3: python-lxml

The lxml XML toolkit is a Pythonic binding for the C libraries libxml2 and libxslt. \ It is unique in that it combines the speed and XML feature completeness of these libraries with \ the simplicity of a native Python API, mostly compatible but superior to the well-known ElementTree API. \ The latest release works with all CPython versions from 2.7 to 3.7. Security Fix(es): An XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of lxml before v4.9.1 allows attackers to access sensitive information or cause a Denial of Service (DoS) via crafted XML input.(CVE-2024-37388)

 https://cve.radiocsirt.org/vuln/pysec-2026-1324 PYSEC-2026-1324 — ebookmeta XML External Entity vulnerability 2026-10-04T06:37:46.017421+00:00

Affected: PyPI: ebookmeta

An XML External Entity (XXE) vulnerability in the `ebookmeta.get_metadata` function via lxml dependency allows attackers to access sensitive information or cause a Denial of Service (DoS) via crafted XML input.