adyanutils (>=0.4.0, <=0.8.6), angeltools (>=0.1.1, <=0.2.3.post5) +46 more potentially affected by CVE-2024-3572 via scrapy (>=2.0.1, <=2.11.0)

scrapy PYPI version =2.0.1, =0.4.0, =0.1.1, =1.1.9, =2.8.3, =1.0.6, =0.0.1, =0.3.0, =0.0.2, =0.3.0a0, =0.7.2, =0.8.2 - elcrawlsdk 1.0.0 - estela-entrypoint 0.2.1 and more Source cves: CVE-2024-3572 Source advisory: OSV:PYSEC-2026-1907...

article-extract (>=0.1.2, <=0.1.3), bookscrape (>=0.0.1.dev1, <=0.0.2b7) +18 more potentially affected by CVE-2024-3572 via scrapy (>=1.3.3, <=1.8.0)

scrapy PYPI version =1.3.3, =0.1.2, =0.0.1.dev1, =1.2.1.20160901, =0.0.5, =0.0.20, =0.9.3b1, =0.0.1, =1.0.0a1, =1.0.0a1, =1.7.2, =1.1.0, =0.1.0, =0.2.3, =0.0.1, =0.1.5, =0.1.8 and more Source cves: CVE-2024-3572 Source advisory: OSV:PYSEC-2026-1907...

Ubuntu: Security Advisory (USN-7476-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-3572

The scrapy/scrapy project is vulnerable to XML External Entity XXE attacks due to the use of lxml.etree.fromstring for parsing untrusted XML data without proper validation. This vulnerability allows attackers to perform denial of service attacks, access local files, generate network connections, ...

article-extract (>=0.1.2, <=0.1.3), bookscrape (>=0.0.1.dev1, <=0.0.2b7) +18 more potentially affected by CVE-2024-3572 via scrapy (>=1.3.3, <=1.8.0)

scrapy PYPI version =1.3.3, =0.1.2, =0.0.1.dev1, =1.2.1.20160901, =0.0.5, =0.0.20, =0.9.3b1, =0.0.1, =1.0.0a1, =1.0.0a1, =1.7.2, =1.1.0, =0.1.0, =0.2.3, =0.0.1, =0.1.5, =0.1.8 and more Source cves: CVE-2024-3572 Source advisory: MEND:CVE-2024-3572...

CVE-2024-3572 XML External Entity (XXE) Vulnerability in scrapy/scrapy

The scrapy/scrapy project is vulnerable to XML External Entity XXE attacks due to the use of lxml.etree.fromstring for parsing untrusted XML data without proper validation. This vulnerability allows attackers to perform denial of service attacks, access local files, generate network connections, ...

adyanutils (>=0.4.0, <=0.8.6), angeltools (>=0.1.1, <=0.2.3.post5) +46 more potentially affected by CVE-2024-3572 via scrapy (>=2.0.1, <=2.11.0)

scrapy PYPI version =2.0.1, =0.4.0, =0.1.1, =1.1.9, =2.8.3, =1.0.6, =0.0.1, =0.3.0, =0.0.2, =0.3.0a0, =0.7.2, =0.8.2 - elcrawlsdk 1.0.0 - estela-entrypoint 0.2.1 and more Source cves: CVE-2024-3572 Source advisory: MEND:CVE-2024-3572...

article-extract (>=0.1.2, <=0.1.3), bookscrape (>=0.0.1.dev1, <=0.0.2b7) +18 more potentially affected by CVE-2024-3572 via scrapy (>=1.3.3, <=1.8.0)

scrapy PYPI version =1.3.3, =0.1.2, =0.0.1.dev1, =1.2.1.20160901, =0.0.5, =0.0.20, =0.9.3b1, =0.0.1, =1.0.0a1, =1.0.0a1, =1.7.2, =1.1.0, =0.1.0, =0.2.3, =0.0.1, =0.1.5, =0.1.8 and more Source cves: CVE-2024-3572 Source advisory: OSV:GHSA-7J7M-V7M3-JQM7...

article-extract (>=0.1.2, <=0.1.3), bookscrape (>=0.0.1.dev1, <=0.0.2b7) +18 more potentially affected by CVE-2024-3572 via scrapy (>=1.3.3, <=1.8.0)

scrapy PYPI version =1.3.3, =0.1.2, =0.0.1.dev1, =1.2.1.20160901, =0.0.5, =0.0.20, =0.9.3b1, =0.0.1, =1.0.0a1, =1.0.0a1, =1.7.2, =1.1.0, =0.1.0, =0.2.3, =0.0.1, =0.1.5, =0.1.8 and more Source cves: CVE-2024-3572 Source advisory: GHSA-7J7M-V7M3-JQM7...

adyanutils (>=0.4.0, <=0.8.6), angeltools (>=0.1.1, <=0.2.3.post5) +46 more potentially affected by CVE-2024-3572 via scrapy (>=2.0.1, <=2.11.0)

scrapy PYPI version =2.0.1, =0.4.0, =0.1.1, =1.1.9, =2.8.3, =1.0.6, =0.0.1, =0.3.0, =0.0.2, =0.3.0a0, =0.7.2, =0.8.2 - elcrawlsdk 1.0.0 - estela-entrypoint 0.2.1 and more Source cves: CVE-2024-3572 Source advisory: GHSA-7J7M-V7M3-JQM7...

adyanutils (>=0.4.0, <=0.8.6), angeltools (>=0.1.1, <=0.2.3.post5) +46 more potentially affected by CVE-2024-3572 via scrapy (>=2.0.1, <=2.11.0)

scrapy PYPI version =2.0.1, =0.4.0, =0.1.1, =1.1.9, =2.8.3, =1.0.6, =0.0.1, =0.3.0, =0.0.2, =0.3.0a0, =0.7.2, =0.8.2 - elcrawlsdk 1.0.0 - estela-entrypoint 0.2.1 and more Source cves: CVE-2024-3572 Source advisory: OSV:GHSA-7J7M-V7M3-JQM7...