CVE-2011-1156

CVE-2011-1156 concerns the Python feedparser (Universal Feed Parser) project. The vulnerability exists in feedparser.py (python-feedparser) prior to version 5.0.1, where a malformed DOCTYPE declaration can be exploited remotely to cause an application crash, i.e., a denial of service. The initial...

CVE-2012-2921

Universal Feed Parser (python-feedparser) vulnerable to memory‑based DoS via a crafted non‑ASCII XML ENTITY declaration in documents; affected versions before 5.1.2. Root cause is parsing/expansion of a malicious XML ENTITY, enabling remote attacker to exhaust memory. Public references note the i...