Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:30411
HistoryMay 10, 2021 - 3:06 p.m.

XML External Entity (XXE)

2021-05-1015:06:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

0.003 Low

EPSS

Percentile

68.3%

svglib is vulnerable to XML External Entity attacks. The vulnerability exists due to svglib not sanitizing the XML input containing reference to external entity by the XML parser.

CPENameOperatorVersion
svglible0.9.3
svglible0.9.3

0.003 Low

EPSS

Percentile

68.3%