15 matches found
CVE-2020-10799
The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...
EUVD-2020-0183
Malware in sbrugna...
XML External Entity (XXE)
svglib is vulnerable to XML External Entity attacks. The vulnerability exists due to svglib not sanitizing the XML input containing reference to external entity by the XML parser...
GHSA-3VCG-8P79-JPCV SVGlib Vulnerable to XXE Attacks
The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...
SVGlib Vulnerable to XXE Attacks
The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...
svglib package for Python code issue vulnerability
svglib package for Python is a Python library for reading and converting SVG files. A code issue vulnerability exists in svglib package 0.9.3 and earlier Python, which can be exploited by an attacker to conduct an XXE attack via a svg2rlg call...
CVE-2020-10799
The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...
CVE-2020-10799
The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...
PYSEC-2020-111
The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...
Design/Logic Flaw
The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...
PYSEC-2020-111
The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...
CVE-2020-10799
CVE-2020-10799 affects the Python svglib package up to version 0.9.3, allowing XXE attacks via an svg2rlg call. Multiple connected sources (Red Hat, OSV, GHSA, CNVD, NVD) corroborate the issue. Reported impact is high/critical with potential disclosure and manipulation of XML input affecting conf...
CVE-2020-10799
The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...
CVE-2020-10799: Improper Restriction of XML External Entity Reference
The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...
CVE-2020-10799
The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call. Recent assessments: ericalexanderorg at March 21, 2020 1:24pm UTC reported: XXE vulnerability in library that’s in use by over 500 projects on Github. Assessed Attacker Value: 3 Assessed Attacker Value: 3Assessed...