2 matches found
SUSE-SU-2025:03457-1 Security update for python-xmltodict
This update for python-xmltodict fixes the following issues: - CVE-2025-9375: XML injection vulnerability in xmltodict allows input data manipulation bsc1249036...
CVE-2025-9375
XML Injection vulnerability in xmltodict allows Input Data Manipulation. This issue affects xmltodict: from 0.14.2 before 0.15.1. NOTE: the scope of this CVE is disputed by the vendor on the grounds that xmltodict.unparse delegates element-name handling to Python's xml.sax.saxutils.XMLGenerator,...