Fedora: Security Advisory for python-docx (FEDORA-2021-aa6ebc01be)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2016-5851

python-docx before 0.8.6 allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted document...

emrt-necd-content (2.5.51), esdrt-content (>=1.74.6, <=1.75.1) potentially affected by CVE-2016-5851 via python-docx (0.8.5)

python-docx PYPI version 0.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on python-docx and may be impacted: - emrt-necd-content 2.5.51 - esdrt-content =1.74.6, =1.75.1 Source cves: CVE-2016-5851 Source advisory: OSV:PYSEC-2016-21...

CVE-2016-5851

python-docx before 0.8.6 is vulnerable to XML External Entity (XXE) attacks via a crafted Word document. The issue affects the python-docx library and is resolved by upgrading to 0.8.6 or later. The provided sources confirm the flaw and its remediation path; no exploitation details are included i...