—
PYSEC-2023-95
Details
py-xml v1.0 was discovered to contain an XML External Entity Injection (XXE) vulnerability which allows attackers to execute arbitrary code via a crafted XML file.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/py-xml
Introduced in:
0No fixed version published yet for py-xml (pip). Pin to a known-safe version or switch to an alternative.