pypi fastfeedparser vulnerabilities

Latest pypi fastfeedparser CVEs

Newest publication first

1. CVE-2026-39376 FastFeedParser has an infinite redirect loop DoS via meta-refresh chain

   Published 2026-04-07

   High·CVSS 7.5 EPSS 0.34%

   FastFeedParser is a high performance RSS, Atom and RDF parser. Prior to 0.5.10, when parse() fetches a URL that returns an HTML page containing a <meta http-equiv="refresh"> tag, it recursively calls itself with the redirect URL — with no depth limit, no visited-URL deduplication...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.