Skip to content
OpenAdvisories

Package · PyPI

mofh

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    GHSA-7r9x-qrpr-3cxw

    mofh Vulnerable to Improper Restriction of XML External Entity Reference

    The `xml.etree.ElementTree` module that mofh used up until version `1.0.1` implements a simple and efficient API for parsing and creating XML data. But it makes the application vulnerable to: - [Billion Laughs attack](https://en.wikipedia.org/wiki/Billion_lau…

    mofh PyPI