—

PYSEC-2019-218

Quick fix

PYSEC-2019-218 — python-libnmap: upgrade to the fixed version with the command below.

pip install --upgrade 'python-libnmap>=0.6.3'

Details

libnmap < v0.6.3 is affected by: XML Injection. The impact is: Denial of service (DoS) by consuming resources. The component is: XML Parsing. The attack vector is: Specially crafted XML payload.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/python-libnmap

Introduced in: 0Fixed in: 0.6.3

Fixpip install --upgrade 'python-libnmap>=0.6.3'

References

https://github.com/savon-noir/python-libnmap/issues/87[REPORT]
https://github.com/advisories/GHSA-9ccv-p7fg-m73x[ADVISORY]