Lxml Lxml vulnerabilities

1 known vulnerability affecting lxml/lxml_lxml.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2022-2309HIGHCVSS 7.5≥ unspecified, < 4.9.12022-07-05

CVE-2022-2309 [HIGH] CWE-476 CVE-2022-2309: NULL Pointer Dereference allows attackers to cause a denial of service (or application crash). This NULL Pointer Dereference allows attackers to cause a denial of service (or application crash). This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code sequence in the application. The vulnerability is caused