https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T02:51:47.076852+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-48565 CVE-2022-48565 2026-10-03T02:51:47.239346+00:00

An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.

 https://vulnerability.circl.lu/vuln/usn-6354-1 USN-6354-1 — python2.7, python3.5 vulnerability 2026-10-03T02:51:47.239460+00:00

Affected: Ubuntu:Pro:14.04:LTS: python2.7, Ubuntu:Pro:16.04:LTS: python2.7, Ubuntu:Pro:16.04:LTS: python3.5, Ubuntu:Pro:18.04:LTS: python2.7

It was discovered that Python did not properly handle XML entity declarations in plist files. An attacker could possibly use this vulnerability to perform an XML External Entity (XXE) injection, resulting in a denial of service or information disclosure.