Skip to content
OpenAdvisories

Package · PyPI

xml2rfc

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium —
    GHSA-432c-wxpg-m4q3

    xml2rfc has file inclusion irregularities

    Version [3.12.0](https://github.com/ietf-tools/xml2rfc/blob/main/CHANGELOG.md#3120---2021-12-08) changed `xml2rfc` so that it would not access local files without the presence of its new `--allow-local-file-access` flag. This prevented XML External Entity (XX…

    xml2rfc PyPI
  • Medium —
    GHSA-cf4q-4cqr-7g7w

    SVG with embedded scripts can lead to cross-site scripting attacks in xml2rfc

    xml2rfc allows `script` elements in SVG sources. In HTML output having these script elements can lead to XSS attacks. Sample XML snippet: ``` <artwork type="svg" src="data:image/svg+xml,%3Csvg viewBox='0 0 10 10' xmlns='http://www.w3.org/2000/svg'%3E%3Cscript…

    xml2rfc PyPI