Skip to content
OpenAdvisories

Package · Debian

python-untangle

2 known vulnerabilities.

All Critical High Medium Low Exploited only

2 results · Clear filters · Feed

  • High 7.5
    CVE-2022-33977

    untangle vulnerable to XML Entity Expansion

    untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts recursive entity references in DTDs. By exploiting this vulnerability, a remote unauthenticated attacker may cause a denial-of-service…

    Christian Stefanescu untangle untangle python-untangle Debian PyPI
  • High 7.5
    CVE-2022-31471

    untangle vulnerable to Improper Restriction of XML External Entity Reference

    untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts XML external entity references. By exploiting this vulnerability, a remote unauthenticated attacker may read the contents of local fil…

    Christian Stefanescu untangle untangle python-untangle Debian PyPI