Skip to content

Product

pypi owslib vulnerabilities

1 published CVE affecting pypi owslib, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest pypi owslib CVEs

Newest publication first

  1. CVE-2023-27476 XML External Entity (XXE) Injection in OWSLib

    Published
    HighCVSS 7.5 EPSS 0.98%

    OWSLib is a Python package for client programming with Open Geospatial Consortium (OGC) web service interface standards, and their related content models. OWSLib's XML parser (which supports both lxml and xml.etree) does not disable entity resolution, and could lead to arbitrary...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.