Product

Lxml Library

1 brief RSS

lxml Library Vulnerable to XXE Attacks via iterparse() and ETCompatXMLParser()

lxml versions before 6.1.0 are vulnerable to XML External Entity (XXE) attacks when using iterparse() or ETCompatXMLParser() with default settings, potentially allowing local file reads.

lxml library lxml XXE vulnerability CVE-2026-41066

2r 1t Jan 3, 2024