Skip to content
OpenAdvisories

Package · PyPI

xml2rfc

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High —
    CVE-2025-11059

    xml2rfc is vulnerable to arbitrary file reads through prepped files

    ### Impact When generating PDF files, this vulnerability allows an attacker to read arbitrary files from the filesystem by injecting malicious link element into the prepped RFCXML. ### Workarounds Test untrusted input with `link` elements with `rel="attachmen…

    xml2rfc PyPI
  • High —
    CVE-2025-11058

    xml2rfc has an arbitrary file read vulnerability

    ### Impact When generating PDF files, this vulnerability allows an attacker to read arbitrary files from the filesystem by injecting malicious link element into the XML. ### Workarounds Test untrusted input with `link` elements with `rel="attachment"` before …

    xml2rfc PyPI