XML injection (XXE) In requests-xml
Description
requests-xml XML External Entity Injection vulnerability requests-xml v0.2.3 was discovered to contain an XML External Entity Injection (XXE) vulnerability which allows attackers to execute arbitrary code via a crafted XML file.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version |
|---|---|---|
 pypi |
Aliases
1. 2. 3. 4.
References
1. 2. 3.