Lucene search
GoogleOSV:PYSEC-2020-75HistoryNov 26, 2020 - 5:15 a.m.
PYSEC-2020-75
2020-11-2605:15:00
Google
osv.dev
8
petl vulnerability
xml entity resolution
software bug
EPSS
0.007
Percentile
80.2%
petl before 1.68, in some configurations, allows resolution of entities in an XML document.
References
github.com/advisories/GHSA-69q2-p9xp-739v
github.com/nvn1729/advisories/blob/master/cve-2020-29128.md
github.com/petl-developers/petl/compare/v1.6.7...v1.6.8
github.com/petl-developers/petl/issues/526
github.com/petl-developers/petl/pull/527
github.com/petl-developers/petl/pull/527/commits/1b0a09f08c3cdfe2e69647bd02f97c1367a5b5f8
github.com/petl-developers/petl/security/advisories/GHSA-f5gc-p5m3-v347
petl.readthedocs.io/en/stable/changes.html
Related
osv
osv
CVE-2020-29128
2020-11-26 05:15:10
XXE in petl
2020-12-02 18:28:30
XML Injection in petl
2021-04-20 16:32:08
github
github
XXE in petl
2020-12-02 18:28:30
XML Injection in petl
2021-04-20 16:32:08
cve
cve
CVE-2020-29128
2020-11-26 05:15:10
prion
prion
Design/Logic Flaw
2020-11-26 05:15:00
veracode
veracode
XML External Entity (XXE)
2020-11-27 00:46:19
cvelist
cvelist
CVE-2020-29128
2020-11-26 05:01:00
nvd
nvd
CVE-2020-29128
2020-11-26 05:15:10