DEBIAN-CVE-2026-58501

Zeep is a Python SOAP client. From 4.0.0 before 4.3.3, Settings.forbidexternal is defined but not enforced when parsing WSDL or XSD documents, allowing transitive xsd:import, xsd:include, wsdl:import, and lxml entity or DTD references to fetch attacker-chosen HTTP or HTTPS URLs. This issue is fix...

CVE-2026-58501

Zeep is a Python SOAP client. From 4.0.0 before 4.3.3, Settings.forbidexternal is defined but not enforced when parsing WSDL or XSD documents, allowing transitive xsd:import, xsd:include, wsdl:import, and lxml entity or DTD references to fetch attacker-chosen HTTP or HTTPS URLs. This issue is fix...

adapter-client (>=1.0.4, <=3.1.0), cafex (1.0.0) +43 more potentially affected by CVE-2026-58501 via zeep (>=4.0.0, <=4.3.2)

zeep PYPI version =4.0.0, =1.0.4, =0.2.0, =0.0.0, =0.1.0, =1.0.1, =2.0.0.dev1, =1.3.1, =4.3.11, =5.0.16 - djangoiransms 1.0.0 and more Source cves: CVE-2026-58501 Source advisory: OSV:GHSA-4CC2-G9W2-FHF6...

adapter-client (>=1.0.4, <=3.1.0), cafex (1.0.0) +43 more potentially affected by CVE-2026-58501 via zeep (>=4.0.0, <=4.3.2)

zeep PYPI version =4.0.0, =1.0.4, =0.2.0, =0.0.0, =0.1.0, =1.0.1, =2.0.0.dev1, =1.3.1, =4.3.11, =5.0.16 - djangoiransms 1.0.0 and more Source cves: CVE-2026-58501 Source advisory: SNYK:PYTHON-ZEEP-17675232...