Skip to content
OpenAdvisories
High · 7.5 CVE-2022-37189 EUVD-2022-6725GHSA-6xm7-3cc5-47f9PYSEC-2026-847

MEI2Volpiano is vulnerable to XML External Entity (XXE), leading to a Denial of Service (DoS)

Published Sep 7, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

DDMAL MEI2Volpiano 0.8.2 is vulnerable to XML External Entity (XXE), leading to a Denial of Service. This occurs due to the usage of the unsafe 'xml.etree' library to parse untrusted XML input.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI mei2volpiano <= 0.8.2 — GHSA-6xm7-3cc5-47f9

References