https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:17:48.200753+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2013-1665 CVE-2013-1665 2026-10-02T23:17:48.202507+00:00

The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) attack.

 https://cve.radiocsirt.org/vuln/ghsa-x64m-686f-fmm3 GHSA-x64m-686f-fmm3 — XML External Entity (XXE) in Django 2026-10-02T23:17:48.202554+00:00

Affected: PyPI: Django

The XML libraries for Python as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) attack.