SOAPpy vulnerable to XML External Entity attacks

SOAPpy 0.12.5 allows remote attackers to read arbitrary files via a SOAP request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

EUVD-2022-1984

Malicious code in bioql PyPI...

EUVD-2022-2479

Malicious code in bioql PyPI...

CVE-2014-3243

SOAPpy 0.12.5 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted SOAP request containing a large number of nested entity references...

PT-2014-5154

Name of the Vulnerable Software and Affected Versions SOAPpy version 0.12.5 Description The issue allows remote attackers to cause a denial of service due to memory and CPU consumption. This is achieved through a crafted SOAP request containing a large number of nested entity references, which th...