Export limit exceeded: 55519 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 30231 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2020-26708

requests-xml v0.2.3 was discovered to contain an XML External Entity Injection (XXE) vulnerability which allows attackers to execute arbitrary code via a crafted XML file.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Requests-xml Project
Products
Requests-xml