~ / search / GHSA-hx54-pf28-7xch

GHSA-hx54-pf28-7xch

ebookmeta XML External Entity vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2024-37388

Packages

EcosystemPackageAffectedFixed in
PyPI ebookmeta < 1.2.8 1.2.8

Details

As written in the advisory (Markdown source, shown as plain text).

An XML External Entity (XXE) vulnerability in the `ebookmeta.get_metadata` function via lxml dependency allows attackers to access sensitive information or cause a Denial of Service (DoS) via crafted XML input.

References

External links from the advisory. They lead to third-party sites.