Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 11 Nov 2026 17:07:58 +0000 GHSA-9mv7-3c64-mmqw — xml2rfc is vulnerable to arbitrary file reads through prepped files https://db.gcve.eu/vuln/ghsa-9mv7-3c64-mmqw <p><strong>Affected:</strong> PyPI: xml2rfc</p> <p>### Impact</p> <p>When generating PDF files, this vulnerability allows an attacker to read arbitrary files from the filesystem by injecting malicious link element into the prepped RFCXML.</p> <p>### Workarounds</p> <p>Test untrusted input with `link` elements with `rel=&#34;attachment&#34;` before processing.</p> <p>### References This is related to [GHSA-cfmv-h8fx-85m7](https://github.com/ietf-tools/xml2rfc/security/advisories/GHSA-cfmv-h8fx-85m7).</p> <p><strong>Affected:</strong> PyPI: xml2rfc</p> <p>### Impact</p> <p>When generating PDF files, this vulnerability allows an attacker to read arbitrary files from the filesystem by injecting malicious link element into the prepped RFCXML.</p> <p>### Workarounds</p> <p>Test untrusted input with `link` elements with `rel=&#34;attachment&#34;` before processing.</p> <p>### References This is related to [GHSA-cfmv-h8fx-85m7](https://github.com/ietf-tools/xml2rfc/security/advisories/GHSA-cfmv-h8fx-85m7).</p> https://db.gcve.eu/vuln/ghsa-9mv7-3c64-mmqw PYSEC-2026-2057 — xml2rfc is vulnerable to arbitrary file reads through prepped files https://db.gcve.eu/vuln/pysec-2026-2057 <p><strong>Affected:</strong> PyPI: xml2rfc</p> <p>### Impact</p> <p>When generating PDF files, this vulnerability allows an attacker to read arbitrary files from the filesystem by injecting malicious link element into the prepped RFCXML.</p> <p>### Workarounds</p> <p>Test untrusted input with `link` elements with `rel=&#34;attachment&#34;` before processing.</p> <p>### References This is related to [GHSA-cfmv-h8fx-85m7](https://github.com/ietf-tools/xml2rfc/security/advisories/GHSA-cfmv-h8fx-85m7).</p> <p><strong>Affected:</strong> PyPI: xml2rfc</p> <p>### Impact</p> <p>When generating PDF files, this vulnerability allows an attacker to read arbitrary files from the filesystem by injecting malicious link element into the prepped RFCXML.</p> <p>### Workarounds</p> <p>Test untrusted input with `link` elements with `rel=&#34;attachment&#34;` before processing.</p> <p>### References This is related to [GHSA-cfmv-h8fx-85m7](https://github.com/ietf-tools/xml2rfc/security/advisories/GHSA-cfmv-h8fx-85m7).</p> https://db.gcve.eu/vuln/pysec-2026-2057