Most recent entries from all

EUVD-2026-198649

fkie_cve-2024-37388

An XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of lxml before v4.9.1 allows attackers to access sensitive information or cause a Denial of Service (DoS) via crafted XML input.

GHSA-hx54-pf28-7xch — ebookmeta XML External Entity vulnerability

Affected: PyPI: ebookmeta

An XML External Entity (XXE) vulnerability in the `ebookmeta.get_metadata` function via lxml dependency allows attackers to access sensitive information or cause a Denial of Service (DoS) via crafted XML input.

OESA-2024-1749 — python-lxml security update

Affected: openEuler:22.03-LTS-SP3: python-lxml

The lxml XML toolkit is a Pythonic binding for the C libraries libxml2 and libxslt. \ It is unique in that it combines the speed and XML feature completeness of these libraries with \ the simplicity of a native Python API, mostly compatible but superior to the well-known ElementTree API. \ The latest release works with all CPython versions from 2.7 to 3.7. Security Fix(es): An XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of lxml before v4.9.1 allows attackers to access sensitive information or cause a Denial of Service (DoS) via crafted XML input.(CVE-2024-37388)

PYSEC-2026-1324 — ebookmeta XML External Entity vulnerability

Affected: PyPI: ebookmeta