Skip to content
OpenAdvisories

Package · PyPI

peppol-py

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.0
    CVE-2025-66371

    Peppol-py is vulnerable to XXE attacks due to Saxon configuration

    Peppol-py before 1.1.1 allows XXE attacks because of the Saxon configuration. When validating XML-based invoices, the XML parser could read files from the filesystem and expose their content to a remote host.

    iteras Peppol-py peppol-py PyPI