Most recent entries from all

EUVD-2026-105520

fkie_cve-2013-1665

The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) attack.

GHSA-x64m-686f-fmm3 — XML External Entity (XXE) in Django

Affected: PyPI: Django

The XML libraries for Python as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) attack.

gsd-2013-1665

PYSEC-2026-802 — XML External Entity (XXE) in Django

Affected: PyPI: django

RHSA-2013:0596 — Red Hat Security Advisory: openstack-keystone security, bug fix, and enhancement update

Keystone: EC2-style authentication accepts disabled user/tenants bindings: Internal entity expansion in Python XML libraries inflicts DoS vulnerabilities bindings: External entity expansion in Python XML libraries inflicts potential security flaws and DoS vulnerabilities