Skip to content
OpenAdvisories
High DLA-3470-1 1 CVE

owslib - security update

Published Jun 25, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 owslib 0.17.1-1+deb10u1

Vulnerabilities 1

  • High 8.2
    CVE-2023-27476

    XML External Entity (XXE) Injection in OWSLib

    OWSLib is a Python package for client programming with Open Geospatial Consortium (OGC) web service interface standards, and their related content models. OWSLib's XML parser (which supports both `lxml` and `xml.etree`) does not disable entity resolution, and…

    geopython OWSLib owslib owslib Debian Ubuntu PyPI