https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T01:53:48.232021+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-16896 EUVD-2026-16896 2026-10-18T01:53:48.235779+00:00 EUVD-2026-16896 https://cve.radiocsirt.org/vuln/fkie_cve-2022-31471 fkie_cve-2022-31471 2026-10-18T01:53:48.235810+00:00

untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts XML external entity references. By exploiting this vulnerability, a remote unauthenticated attacker may read the contents of local files.

 https://cve.radiocsirt.org/vuln/ghsa-f83q-2cp7-qrjg GHSA-f83q-2cp7-qrjg — untangle vulnerable to Improper Restriction of XML External Entity Reference 2026-10-18T01:53:48.235839+00:00

Affected: PyPI: untangle

### Description untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts XML external entity references. By exploiting this vulnerability, a remote unauthenticated attacker may read the contents of local files.

### Impact An attacker may be able to read the contents of local files. This affects untangle versions up to and including 1.2.0

### Patches The problem has been fixed with version 1.2.1

### Workarounds None

### References https://jvn.jp/en/jp/JVN30454777/

### For more information If you have any questions or comments about this advisory: * Open an [issue](https://github.com/stchris/untangle/issues)

 https://cve.radiocsirt.org/vuln/gsd-2022-31471 gsd-2022-31471 2026-10-18T01:53:48.235869+00:00 gsd-2022-31471 https://cve.radiocsirt.org/vuln/jvndb-2022-000058 jvndb-2022-000058 2026-10-18T01:53:48.235882+00:00

untangle provided by Christian Stefanescu is a Python library for processing XML documents. untangle contains multiple vulnerabilities listed below. * Improper Restriction of Recursive Entity References in DTDs (CWE-776) - CVE-2022-33977 * Improper Restriction of XML External Entity Reference (CWE-611) - CVE-2022-31471</li></ul> Taichi Kotake of Sterra Security Co.,Ltd. / Akatsuki Games Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

 https://cve.radiocsirt.org/vuln/pysec-2022-244 PYSEC-2022-244 2026-10-18T01:53:48.235903+00:00

Affected: PyPI: untangle

untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts XML external entity references. By exploiting this vulnerability, a remote unauthenticated attacker may read the contents of local files.