Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

ebookmeta

2 known vulnerabilities (1 critical, 1 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 1 critical, 1 high
Registry
PyPI

Advisories 2

  • CVE-2024-37388Critical 9.1

    An XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of lxml before v4.9.1 allows attackers to access…

    Affected: fixed in 1.2.8.

  • An XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of ebookmeta before v1.2.8 allows attackers to access…

    Affected: fixed in 1.2.8.