CVE-2024-37388

CVE-2024-37388 describes an XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of the Python library lxml, affecting versions prior to 4.9.1. The issue enables an attacker to access sensitive information or cause a Denial of Service (DoS) via crafted XML input. Publicl...

CVE-2024-36827

The vulnerability CVE-2024-36827 affects the ebookmeta Python library, specifically the ebookmeta.get_metadata function. It is an XML External Entity (XXE) vulnerability present in versions prior to v1.2.8, allowing attackers to access sensitive information or cause a Denial of Service (DoS) via ...