CVE-2020-10799

The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...

EUVD-2020-0183

Malware in sbrugna...

XML External Entity (XXE)

svglib is vulnerable to XML External Entity attacks. The vulnerability exists due to svglib not sanitizing the XML input containing reference to external entity by the XML parser...

SVGlib Vulnerable to XXE Attacks

The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...

GHSA-3VCG-8P79-JPCV SVGlib Vulnerable to XXE Attacks

The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...

svglib package for Python code issue vulnerability

svglib package for Python is a Python library for reading and converting SVG files. A code issue vulnerability exists in svglib package 0.9.3 and earlier Python, which can be exploited by an attacker to conduct an XXE attack via a svg2rlg call...

CVE-2020-10799

The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...

CVE-2020-10799

The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...

PYSEC-2020-111

The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...

PYSEC-2020-111

The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...

Design/Logic Flaw

The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...

CVE-2020-10799

CVE-2020-10799 affects the Python svglib package up to version 0.9.3, allowing XXE attacks via an svg2rlg call. Multiple connected sources (Red Hat, OSV, GHSA, CNVD, NVD) corroborate the issue. Reported impact is high/critical with potential disclosure and manipulation of XML input affecting conf...

CVE-2020-10799

The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...

CVE-2020-10799

The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call. Recent assessments: ericalexanderorg at March 21, 2020 1:24pm UTC reported: XXE vulnerability in library that’s in use by over 500 projects on Github. Assessed Attacker Value: 3 Assessed Attacker Value: 3Assessed...