GHSA-ccrc-9x59-3vc4
requests-xml XML External Entity Injection vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| PyPI | requests-xml | <= 0.2.3 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
requests-xml v0.2.3 was discovered to contain an XML External Entity Injection (XXE) vulnerability which allows attackers to execute arbitrary code via a crafted XML file.
References
External links from the advisory. They lead to third-party sites.