MEDIUM 5.3
PYSEC-2026-2056
xhtml2pdf Denial of Service via crafted string
상세
An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service (ReDOS) via supplying a crafted string.
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.
영향 패키지
PyPI / xhtml2pdf
최초 영향 버전:
0 No fixed version published yet for xhtml2pdf (pip). Pin to a known-safe version or switch to an alternative.