GCVE - cpe:2.3:a:christian_stefanescu:untangle:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:christian_stefanescu:untangle:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Christian Stefanescu (`df87fc6e-e180-5d6b-a406-0f219b3e9b79`)
Product	Untangle (`fecf03f7-05c4-5513-8319-b3914fa06320`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-33977`	vulnerable	2026-06-08 05:44:51.954404	Details available untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts recursive entity references in DTDs. By exploiting this vulnerability, a remote unauthenticated attacker may cause a denial-of-service (DoS) condition on the server where the product is running. Published: 2022-07-26T05:10:44.000Z Updated: 2024-08-03T08:16:16.078Z Open on db.gcve.eu Reference links https://github.com/stchris/untangle https://github.com/stchris/untangle/releases/tag/1.2.1 https://jvn.jp/en/jp/JVN30454777/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-31471`	vulnerable	2026-06-08 05:43:40.833431	Details available untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts XML external entity references. By exploiting this vulnerability, a remote unauthenticated attacker may read the contents of local files. Published: 2022-07-26T05:10:27.000Z Updated: 2024-08-03T07:19:06.083Z Open on db.gcve.eu Reference links https://github.com/stchris/untangle https://github.com/stchris/untangle/releases/tag/1.2.1 https://jvn.jp/en/jp/JVN30454777/	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.