https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-08T19:36:32.841655+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-7210 CVE-2026-7210 — The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection 2026-10-08T19:36:32.861166+00:00

Affected: Python Software Foundation CPython

`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.

 https://db.gcve.eu/vuln/usn-8524-1 USN-8524-1 — python2.7, python3.5 vulnerability 2026-10-08T19:36:32.861232+00:00

Affected: Ubuntu:Pro:16.04:LTS: python2.7, Ubuntu:Pro:16.04:LTS: python3.5

It was discovered that Python did not use sufficient entropy for Expat hash-flooding protection in the xml.parsers.expat and xml.etree.ElementTree modules. An attacker could use this to cause a denial of service via a crafted XML document.