Debian Owslib vulnerabilities

1 known vulnerability affecting debian/owslib.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2023-27476HIGHCVSS 8.2fixed in owslib 0.27.2-3 (bookworm)2023

CVE-2023-27476 [HIGH] CVE-2023-27476: owslib - OWSLib is a Python package for client programming with Open Geospatial Consortiu... OWSLib is a Python package for client programming with Open Geospatial Consortium (OGC) web service interface standards, and their related content models. OWSLib's XML parser (which supports both `lxml` and `xml.etree`) does not disable entity resolution, and could lead to arbitrary file reads from an attacker-controlled XML payload. This affects all XML parsing in t