GCVE - cpe:2.3:a:untangle_project:untangle:*:*:*:*:*:python:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:untangle_project:untangle:*:*:*:*:*:python:*:*

part: a version: * update: *

Vendor	Untangle Project (`dece4515-ecb5-5aad-b3b7-3e83af0262e4`)
Product	Untangle (`eca09985-ab78-51d8-bd3d-a1e40099baaa`)
Edition	*
Language	*
Software edition	*
Target software	python
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-33977`	vulnerable	2026-06-08 05:44:51.955084	Details available untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts recursive entity references in DTDs. By exploiting this vulnerability, a remote unauthenticated attacker may cause a denial-of-service (DoS) condition on the server where the product is running. Published: 2022-07-26T05:10:44.000Z Updated: 2024-08-03T08:16:16.078Z Open on db.gcve.eu Reference links https://github.com/stchris/untangle https://github.com/stchris/untangle/releases/tag/1.2.1 https://jvn.jp/en/jp/JVN30454777/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-31471`	vulnerable	2026-06-08 05:43:40.834214	Details available untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts XML external entity references. By exploiting this vulnerability, a remote unauthenticated attacker may read the contents of local files. Published: 2022-07-26T05:10:27.000Z Updated: 2024-08-03T07:19:06.083Z Open on db.gcve.eu Reference links https://github.com/stchris/untangle https://github.com/stchris/untangle/releases/tag/1.2.1 https://jvn.jp/en/jp/JVN30454777/	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.