Skip to content
Threat Feed
Subscribe

Tag

Lxml

1 brief RSS
high advisory

lxml Library Vulnerable to XXE Attacks via iterparse() and ETCompatXMLParser()

lxml versions before 6.1.0 are vulnerable to XML External Entity (XXE) attacks when using iterparse() or ETCompatXMLParser() with default settings, potentially allowing local file reads.

lxml library lxml XXE vulnerability CVE-2026-41066
2r 1t