CVE-2025-6985 XXE Vulnerability in langchain-ai/langchain

The HTMLSectionSplitter class in langchain-text-splitters version 0.3.8 is vulnerable to XML External Entity XXE attacks due to unsafe XSLT parsing. This vulnerability arises because the class allows the use of arbitrary XSLT stylesheets, which are parsed using lxml.etree.parse and lxml.etree.XSL...

EUVD-2024-50350

Malicious code in bioql PyPI...

EUVD-2023-0697

Malicious code in bioql PyPI...

EUVD-2022-5013

Malicious code in bioql PyPI...

EUVD-2022-2850

Malicious code in bioql PyPI...

EUVD-2021-9665

Malicious code in bioql PyPI...

EUVD-2022-5628

Malicious code in bioql PyPI...

EUVD-2025-28004

Malicious code in bioql PyPI...

EUVD-2023-46128

Malicious code in bioql PyPI...

EUVD-2022-48225

Malicious code in bioql PyPI...

EUVD-2024-0053

Malicious code in bioql PyPI...

EUVD-2025-24835

Malicious code in bioql PyPI...

EUVD-2025-23180

Malicious code in bioql PyPI...

EUVD-2022-2450

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2018-1000639

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LatexDraw version =4.0 contains a XML External Entity XXE vulnerability in SVG parsing functionality that can result in disclosure of data, server side request...

CVE-2025-10091 Jinher OA XML Type xml external entity reference

A vulnerability has been found in Jinher OA up to 1.2. This affects an unknown function of the file /c6/Jhsoft.Web.projectmanage/ProjectManage/XmlHttp.aspx/?Type=add of the component XML Handler. The manipulation leads to xml external entity reference. Remote exploitation of the attack is possibl...

Jinher OA 代码问题漏洞

Jinher OA is a collaborative management software from Jinher, China. A code issue vulnerability exists in Jinher OA 1.2 and earlier versions, which originates from an XML external entity reference vulnerability in the /c6/Jhsoft.Web.projectmanage/ProjectManage/XmlHttp.aspx file...

Delta Electronics EIP Builder

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to potentially process dangerous external entities, resulting in disclosure of sensitive information. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation...

Linux Distros Unpatched Vulnerability : CVE-2018-1000652

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JabRef version =4.3.1 contains a XML External Entity XXE vulnerability in MsBibImporter XML Parser that can result in disclosure of confidential data, denial of...

Linux Distros Unpatched Vulnerability : CVE-2018-1000069

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreePlane version 1.5.9 and earlier contains a XML External Entity XXE vulnerability in XML Parser in mindmap loader that can result in stealing data from...