Threats affecting pkg:brew/gtk-doc

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.8	EPSS 0.2%	CVE-2026-4539SUSE locust · Security update for python-Pygments Medium4.8EPSS 0.2%2026-06-09GCVE DatabaseCVE-2026-4539 This update for python-Pygments fixes the following issue: - CVE-2026-4539: Denial of Service via inefficient regular expression processing in AdlLexer (bsc#1260796). EPSS 0.2%Report on CVE-2026-4539 Vulnerability SUSE Product Security Team	GCVE Database	2026-06-09
Medium	–	EPSS 0.3%	CVE-2026-41066SUSE lxml · Security update for python-lxml MediumEPSS 0.3%2026-05-11GCVE DatabaseCVE-2026-41066 A vulnerability in the lxml library used by recon-ng allows XML External Entity (XXE) attacks via the default configuration of iterparse() and ETCompatXMLParser(). This enables untrusted XML input to read local files. The issue is addressed in lxml 6.1.0 by changing the default resolve_entities setting to 'internal', preventing local file access. Users can also mitigate by explicitly setting resolve_entities to 'internal' or false. EPSS 0.3%Vulnerability SUSE Product Security Team #brew-papis-cve-2026-41066 #homebrew #brew-gtk-doc-cve-2026-41066	GCVE Database	2026-05-11

Page 1 of 1