39 matches found
XML External Entity (XXE)
pikepdf is vulnerable to XML External Entities XXE. The vulnerability exists through parsing XMP metadata entries when parsing BytesIOxml...
Fedora: Security Advisory for python-pikepdf (FEDORA-2021-5e598049a1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for python-pikepdf (FEDORA-2021-5e598049a1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-29421
models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries...
CVE-2021-29421
models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries...
DEBIAN-CVE-2021-29421
models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries...
PYSEC-2021-34
models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries...
PYSEC-2021-34
models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries...
CVE-2021-29421
models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries...
Code injection
models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries...
CVE-2021-29421
models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries...
UBUNTU-CVE-2021-29421
models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries...
PT-2021-18202
Name of the Vulnerable Software and Affected Versions: pikepdf versions 1.3.0 through 2.9.2 Description: The issue allows XXE XML External Entity attacks when parsing XMP metadata entries in the models/metadata.py file of the pikepdf package for Python. This occurs due to improper handling of XML...
CVE-2021-29421
models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries...
CVE-2021-29421
CVE-2021-29421 affects the Python library pikepdf (models/metadata.py) from 1.3.0 through 2.9.2, due to XXE when parsing XMP metadata entries. The issue is documented across multiple sources; a fix is available in pikepdf 2.10.0 and later. Upgrading to >= 2.10.0 is the recommended remediation....
jbarlow83 pikepdf 代码问题漏洞
jbarlow83 pikepdf is a jbarlow83 open source application . A Python library for reading and writing PDF files . A security vulnerability exists in pikepdf package 1.3.0 through 2.9.2, which stems from allowing XXE when parsing XMP metadata items...
CVE-2021-29421
models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries...
