Skip to content

Product

osgeo owslib vulnerabilities

2 published CVES affecting osgeo owslib, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest osgeo owslib CVEs

Newest publication first

  1. CVE-2023-27476 XML External Entity (XXE) Injection in OWSLib

    Published
    HighCVSS 7.5 EPSS 0.98%

    OWSLib is a Python package for client programming with Open Geospatial Consortium (OGC) web service interface standards, and their related content models. OWSLib's XML parser (which supports both lxml and xml.etree) does not disable entity resolution, and could lead to arbitrary...

  2. CVE-2021-39371 XML External Entity Injection in PyWPS

    Published
    HighCVSS 7.5 EPSS 1.5%

    An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.