XML External Entity (XXE)

pikepdf is vulnerable to XML External Entities XXE. The vulnerability exists through parsing XMP metadata entries when parsing BytesIOxml...

CVE-2021-29421

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries...

jbarlow83 pikepdf 代码问题漏洞

jbarlow83 pikepdf is a jbarlow83 open source application . A Python library for reading and writing PDF files . A security vulnerability exists in pikepdf package 1.3.0 through 2.9.2, which stems from allowing XXE when parsing XMP metadata items...