901 matches found
PT-2026-73429
Element.findall and fully-consumed Element.iterfind exhibit On^2 time complexity when using XPath index predicates e.g. 1, last, last-N on XML documents with many same-tag siblings. Element.find is only affected when the first match is near the end of the sibling list, such as with last or...
PT-2026-73427
Element.findall and fully-consumed Element.iterfind exhibit On^2 time complexity when using XPath index predicates e.g. 1, last, last-N on XML documents with many same-tag siblings. Element.find is only affected when the first match is near the end of the sibling list, such as with last or...
Important Photon OS Security Update - PHSA-2026-5.0-90-0949
Updates of 'python-lxml' packages of Photon OS have been released...
EulerOS 2.0 SP11 : python-lxml (EulerOS-SA-2026-3146)
According to the versions of the python-lxml packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default...
EulerOS 2.0 SP11 : python-lxml (EulerOS-SA-2026-3092)
According to the versions of the python-lxml packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default...
EulerOS 2.0 SP15 : python-lxml (EulerOS-SA-2026-2942)
According to the versions of the python-lxml packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default...
EulerOS 2.0 SP13 : python-lxml (EulerOS-SA-2026-2990)
According to the versions of the python-lxml packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default...
EulerOS 2.0 SP13 : python-lxml (EulerOS-SA-2026-3040)
According to the versions of the python-lxml packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default...
EulerOS 2.0 SP15 : python-lxml (EulerOS-SA-2026-2901)
According to the versions of the python-lxml packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default...
CLSA-2026-1779238041 TuxCare security update for lxml (1 CVE)
TuxCare rebuilt lxml to address 1 CVE. Fixed in 5.4.0.post1+tuxcare...
CLSA-2026-1779151640 TuxCare security update for lxml (1 CVE)
TuxCare rebuilt lxml to address 1 CVE. Fixed in 4.9.4.post1+tuxcare...
Security Bulletin:lxml Local File Access Vulnerability: Fixed in 6.1.0
Summary lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default configuration with resolveentities=True allows untrusted XML input to read local files. Setting the resolveentities option explicitly to...
OESA-2026-3217 python-lxml security update
\ Security Fixes: lxmlhtmlclean.Cleaner does not strip javascript: URLs from namespaced URL attributes xlink:href. The vulnerability exists because Cleaner filters URL schemes by walking links via rewritelinks, which delegates to iterlinks, which only yields attributes named in...
CVE-2026-6879
Element.findall and fully-consumed Element.iterfind exhibit On^2 time complexity when using XPath index predicates e.g. 1, last, last-N on XML documents with many same-tag siblings. Element.find is only affected when the first match is near the end of the sibling list, such as with last or...
EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2750)
According to the versions of the package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default...
EulerOS Virtualization 2.10.1 : python-lxml (EulerOS-SA-2026-2834)
According to the versions of the python-lxml package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the...
EulerOS Virtualization 2.12.0 : python-lxml (EulerOS-SA-2026-2796)
According to the versions of the python-lxml package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the...
EulerOS Virtualization 2.10.0 : python-lxml (EulerOS-SA-2026-2865)
According to the versions of the python-lxml package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the...
The vulnerability of the etree.iterparse() and ETCompatXMLParser() functions in the Lxml library for processing XML and HTML markup allows attackers to read arbitrary files.
The vulnerability of the etree.iterparse and ETCompatXMLParser functions in the Lxml library for processing XML and HTML markup is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow an attacker to read arbitrary files...
EulerOS 2.0 SP10 : python-lxml (EulerOS-SA-2026-2708)
According to the versions of the python-lxml packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default...