Most recent entries from all

bdu:2021-03604

cnvd-2019-36472

EUVD-2026-58512

fkie_cve-2019-17626

ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.

GHSA-qpg2-vx7j-3869 — XML Injection in ReportLab

Affected: PyPI: reportlab

ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.

gsd-2019-17626

OESA-2021-1281 — python-reportlab security update

Affected: openEuler:20.03-LTS-SP1: python-reportlab, openEuler:20.03-LTS-SP2: python-reportlab

The ReportLab Toolkit. An Open Source Python library for generating PDFs and graphics. Security Fix(es): ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.(CVE-2019-17626)

openSUSE-SU-2020:0160-1 — Security update for python-reportlab

Security update for python-reportlab

PYSEC-2019-117

Affected: PyPI: reportlab

ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.

RHSA-2020:0197 — Red Hat Security Advisory: python-reportlab security update

python-reportlab: code injection in colors.py allows attacker to execute code

SUSE-SU-2020:0324-1 — Security update for python-reportlab

Security update for python-reportlab

UBUNTU-CVE-2019-17626

Affected: Ubuntu:16.04:LTS: python-reportlab, Ubuntu:18.04:LTS: python-reportlab

ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.