Approved changes feed: RSS · Atom

cpe:2.3:a:requests-xml_project:requests-xml:0.2.3:*:*:*:*:python:*:*

part: a version: 0.2.3 update: *

VendorRequests Xml Project (08a648d0-1d5e-5570-b55e-bfb627e0c4d7)
ProductRequests Xml (adc6c8ac-d021-5da7-b65d-4e350113805e)
Edition*
Language*
Software edition*
Target softwarepython
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/erinxocon/requests-xml purl2cpe 2026-06-01 10:14:43.117810
pkg:pypi/requests-xml purl2cpe 2026-06-01 10:14:43.117813

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-26708 vulnerable 2026-06-08 05:23:51.448126 Details available
requests-xml v0.2.3 was discovered to contain an XML External Entity Injection (XXE) vulnerability which allows attackers to execute arbitrary code via a crafted XML file.
Published: 2023-06-29T00:00:00.000Z
Updated: 2024-11-27T14:41:47.661Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.