Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 11 | owslib | 0.23.0-1+deb11u1 |
Vulnerabilities 1
-
High 8.2
XML External Entity (XXE) Injection in OWSLib
OWSLib is a Python package for client programming with Open Geospatial Consortium (OGC) web service interface standards, and their related content models. OWSLib's XML parser (which supports both `lxml` and `xml.etree`) does not disable entity resolution, and…