CVE-2022-33977

untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts recursive entity references in DTDs. By exploiting this vulnerability, a remote unauthenticated attacker may cause a denial-of-service DoS condition on the server where the...

CVE-2022-33977

CVE-2022-33977 affects the Python library untangle (versions ≤ 1.2.0). The root cause is improper handling of recursive entity references in DTDs, which can allow a remote unauthenticated attacker to trigger a DoS condition on the server running the product. The advisory in the connected GHSA ent...