LangChain Text Splitters is vulnerable to XML External Entity (XXE) attacks due to unsafe XSLT parsing

The HTMLSectionSplitter class in langchain-text-splitters is vulnerable to XML External Entity XXE attacks due to unsafe XSLT parsing. This vulnerability arises because the class allows the use of arbitrary XSLT stylesheets, which are parsed using lxml.etree.parse and lxml.etree.XSLT without any...

EUVD-2022-33412

Malicious code in bioql PyPI...

EUVD-2023-27003

Malicious code in bioql PyPI...

EUVD-2023-51029

Malicious code in bioql PyPI...

EUVD-2022-33846

Malicious code in bioql PyPI...

EUVD-2022-39656

Malicious code in bioql PyPI...

EUVD-2022-52837

Malicious code in bioql PyPI...

EUVD-2022-4992

Malicious code in bioql PyPI...

EUVD-2022-2311

Malicious code in bioql PyPI...

EUVD-2022-44890

Malicious code in bioql PyPI...

EUVD-2022-2296

Malicious code in bioql PyPI...

EUVD-2024-0489

Malicious code in bioql PyPI...

EUVD-2023-24157

Malicious code in bioql PyPI...

EUVD-2023-27665

Malicious code in bioql PyPI...

EUVD-2022-32121

Malicious code in bioql PyPI...

EUVD-2024-34042

Malicious code in bioql PyPI...

EUVD-2022-1896

Malicious code in bioql PyPI...

EUVD-2023-42131

Malicious code in bioql PyPI...

EUVD-2022-2358

Malicious code in bioql PyPI...

EUVD-2022-2479

Malicious code in bioql PyPI...