Skip to content

Product

debian/feedparser vulnerabilities

5 published CVES affecting debian/feedparser, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
5
Critical
0
High
0
Medium
5
Low
0
Unscored
0
CISA KEV
0

Latest debian/feedparser CVEs

Newest publication first

  1. CVE-2012-2921 feedparser denial of service vulnerability

    Published
    MediumCVSS 5.0

    Universal Feed Parser (aka feedparser or python-feedparser) before 5.1.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML ENTITY declaration in a non-ASCII encoded document.

  2. CVE-2011-1156 feedparser denial of service vulnerability

    Published
    MediumCVSS 5.0

    feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0.1 allows remote attackers to cause a denial of service (application crash) via a malformed DOCTYPE declaration.

  3. CVE-2011-1158 feedparser Cross-site Scripting vulnerability

    Published
    MediumCVSS 4.3 EPSS 2.3%

    Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via an unexpected URI scheme, as demonstrated by a javascript: URI.

  4. CVE-2011-1157 feedparser Cross-site Scripting vulnerability

    Published
    MediumCVSS 4.3 EPSS 2.5%

    Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via malformed XML comments.

  5. CVE-2009-5065 feedparser Cross-site Scripting vulnerability

    Published
    MediumCVSS 4.3 EPSS 4.5%

    Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.