https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:28:26.406528+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-19450 CVE-2019-19450 2026-10-03T06:28:26.408217+00:00

paraparser in ReportLab before 3.5.31 allows remote code execution because start_unichar in paraparser.py evaluates untrusted user input in a unichar element in a crafted XML document with '<unichar code="' followed by arbitrary Python code, a similar issue to CVE-2019-17626.

 https://cve.radiocsirt.org/vuln/ghsa-pj98-2xf6-cff5 GHSA-pj98-2xf6-cff5 — ReportLab vulnerable to remote code execution via paraparser 2026-10-03T06:28:26.408264+00:00

Affected: PyPI: reportlab

paraparser in ReportLab before 3.5.31 allows remote code execution because start_unichar in paraparser.py evaluates untrusted user input in a unichar element in a crafted XML document with '<unichar code="' followed by arbitrary Python code, a similar issue to CVE-2019-17626.