38 matches found
SUSE CVE-2025-68463
Bio.Entrez in Biopython through 186 allows doctype XXE...
CVE-2025-68463
A flaw was found in python-biopython. The Bio.Entrez module is vulnerable to an XML External Entity XXE attack when processing untrusted XML data. A remote attacker could exploit this vulnerability to disclose sensitive information from the system or potentially cause a denial of service DoS by...
XML External Entity (XXE) Injection
Overview biopython is a Freely available tools for computational molecular biology. Affected versions of this package are vulnerable to XML External Entity XXE Injection via the Bio.Entrez class. An attacker can access sensitive information or cause limited denial of service by submitting crafted...
GHSA-X3VF-39HJ-GXR4 Biopython is vulnerable to doctype XML external entity (XXE) injection through Bio.Entrez
Bio.Entrez in Biopython through 1.86 allows doctype XXE...
Biopython is vulnerable to doctype XML external entity (XXE) injection through Bio.Entrez
Bio.Entrez in Biopython through 1.86 allows doctype XXE...
EUVD-2025-204037
Biopython is vulnerable to doctype XML external entity XXE injection through Bio.Entrez...
CVE-2025-68463
Bio.Entrez in Biopython through 186 allows doctype XXE...
CVE-2025-68463
Bio.Entrez in Biopython through 186 allows doctype XXE...
UBUNTU-CVE-2025-68463
Bio.Entrez in Biopython through 186 allows doctype XXE...
CVE-2025-68463
Bio.Entrez in Biopython through 186 allows doctype XXE...
CVE-2025-68463
Biopython (Bio.Entrez) up to version 1.86 is affected by CVE-2025-68463, an XML external entity (XXE) vulnerability in Bio.Entrez that can arise from processing untrusted Doctype declarations. Affected component/file: Bio.Entrez in Biopython; root cause: improper handling of external entities lea...
CVE-2025-68463
Bio.Entrez in Biopython through 186 allows doctype XXE...
CVE-2025-68463
Bio.Entrez in Biopython through 186 allows doctype XXE...
CVE-2025-68463
Bio.Entrez in Biopython through 186 allows doctype XXE...
Linux Distros Unpatched Vulnerability : CVE-2025-68463
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bio.Entrez in Biopython through 186 allows doctype XXE. CVE-2025-68463 Note that Nessus relies on the presence of the package as reported by the vendor...
PT-2025-51994
Name of the Vulnerable Software and Affected Versions Biopython versions prior to 1.87 Description Bio.Entrez in Biopython allows doctype XML External Entity XXE, which is a technique where an XML parser is tricked into processing external entities within a document type definition, potentially...
CVE-2025-68463: Improper Restriction of XML External Entity Reference
Bio.Entrez in Biopython through 186 allows doctype XXE...
biopython 代码问题漏洞
biopython is a Python library open-sourced by the Biopython Project. A code issue vulnerability exists in biopython version 186 and earlier, which stems from Bio.Entrez allowing doctype XXE...