MEDIUMPyPI
GHSA-432c-wxpg-m4q3xml2rfc has file inclusion irregularities
Modified: 2/7/2025
package
PyPI/xml2rfc
pkg:pypi/xml2rfc
HIGHPyPI
GHSA-9mv7-3c64-mmqw· CVE-2025-11059, PYSEC-2026-2057xml2rfc is vulnerable to arbitrary file reads through prepped files
Modified: 7/7/2026
MEDIUMPyPI
GHSA-cf4q-4cqr-7g7wSVG with embedded scripts can lead to cross-site scripting attacks in xml2rfc
Modified: 12/5/2024
HIGHPyPI
GHSA-cfmv-h8fx-85m7· CVE-2025-11058, PYSEC-2026-2058xml2rfc has an arbitrary file read vulnerability
Modified: 7/7/2026
—PyPI
PYSEC-2026-2057· CVE-2025-11059, GHSA-9mv7-3c64-mmqwxml2rfc is vulnerable to arbitrary file reads through prepped files
Modified: 7/7/2026
—PyPI
PYSEC-2026-2058· CVE-2025-11058, GHSA-cfmv-h8fx-85m7xml2rfc has an arbitrary file read vulnerability
Modified: 7/7/2026