High · 7.5 CVE-2021-25951 EUVD-2021-0469GHSA-gp6m-vqhm-5cm5PYSEC-2021-349

XML2Dict XML Entity Expansion Vulnerability

Published Jun 30, 2021 · Updated Aug 3, 2024 · Assigned by Mend

Description

XXE vulnerability in 'XML2Dict' version 0.2.2 allows an attacker to cause a denial of service.

Vendor	Product	Affected	Fixed
—	XML2Dict	0.2.2	—

Ecosystem	Package	Affected	Fixed	Record
PyPI	xml2dict	<= 0.2.2	—	GHSA-gp6m-vqhm-5cm5
PyPI	xml2dict	all versions	—	PYSEC-2021-349