https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T14:46:52.049883+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2021-29421 CVE-2021-29421 2026-09-30T14:46:52.054743+00:00

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries.

 https://db.gcve.eu/vuln/ghsa-ccgm-3xw4-h5p8 GHSA-ccgm-3xw4-h5p8 — Improper Restriction of XML External Entity Reference in pikepdf 2026-09-30T14:46:52.054809+00:00

Affected: PyPI: pikepdf

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries.

 https://db.gcve.eu/vuln/pysec-2021-34 PYSEC-2021-34 2026-09-30T14:46:52.054851+00:00

Affected: PyPI: pikepdf

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries.