https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 01:50:49 +0000 https://cve.radiocsirt.org/vuln/cve-2022-31471 <p><strong>Affected:</strong> Christian Stefanescu untangle</p> <p>untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts XML external entity references. By exploiting this vulnerability, a remote unauthenticated attacker may read the contents of local files.</p> <p><strong>Affected:</strong> Christian Stefanescu untangle</p> <p>untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts XML external entity references. By exploiting this vulnerability, a remote unauthenticated attacker may read the contents of local files.</p> https://cve.radiocsirt.org/vuln/cve-2022-31471 https://cve.radiocsirt.org/vuln/ghsa-f83q-2cp7-qrjg <p><strong>Affected:</strong> PyPI: untangle</p> <p>### Description untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts XML external entity references. By exploiting this vulnerability, a remote unauthenticated attacker may read the contents of local files.</p> <p>### Impact An attacker may be able to read the contents of local files. This affects untangle versions up to and including 1.2.0</p> <p>### Patches The problem has been fixed with version 1.2.1</p> <p>### Workarounds None</p> <p>### References https://jvn.jp/en/jp/JVN30454777/</p> <p>### For more information If you have any questions or comments about this advisory: * Open an [issue](https://github.com/stchris/untangle/issues)</p> <p><strong>Affected:</strong> PyPI: untangle</p> <p>### Description untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts XML external entity references. By exploiting this vulnerability, a remote unauthenticated attacker may read the contents of local files.</p> <p>### Impact An attacker may be able to read the contents of local files. This affects untangle versions up to and including 1.2.0</p> <p>### Patches The problem has been fixed with version 1.2.1</p> <p>### Workarounds None</p> <p>### References https://jvn.jp/en/jp/JVN30454777/</p> <p>### For more information If you have any questions or comments about this advisory: * Open an [issue](https://github.com/stchris/untangle/issues)</p> https://cve.radiocsirt.org/vuln/ghsa-f83q-2cp7-qrjg