CVE-2020-10799

The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...

CVE-2020-10799

CVE-2020-10799 affects the Python svglib package up to version 0.9.3, allowing XXE attacks via an svg2rlg call. Multiple connected sources (Red Hat, OSV, GHSA, CNVD, NVD) corroborate the issue. Reported impact is high/critical with potential disclosure and manipulation of XML input affecting conf...

CVE-2020-10799

The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call. Recent assessments: ericalexanderorg at March 21, 2020 1:24pm UTC reported: XXE vulnerability in library that’s in use by over 500 projects on Github. Assessed Attacker Value: 3 Assessed Attacker Value: 3Assessed...