11 matches found
CVE-2020-10799
The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...
EUVD-2020-0183
Malware in sbrugna...
SVGlib Vulnerable to XXE Attacks
The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...
svglib package for Python code issue vulnerability
svglib package for Python is a Python library for reading and converting SVG files. A code issue vulnerability exists in svglib package 0.9.3 and earlier Python, which can be exploited by an attacker to conduct an XXE attack via a svg2rlg call...
PYSEC-2020-111
The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...
PYSEC-2020-111
The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...
Design/Logic Flaw
The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...
CVE-2020-10799
The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...
CVE-2020-10799
The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...
CVE-2020-10799: Improper Restriction of XML External Entity Reference
The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...
PT-2020-12331
Name of the Vulnerable Software and Affected Versions svglib versions through 0.9.3 Description The issue allows XXE attacks via an svg2rlg call. This affects the svglib package for Python. Recommendations For versions through 0.9.3, consider disabling the svg2rlg call as a temporary workaround...