Threats tagged 'brew-papis-cve-2026-41066'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	–	EPSS 0.3%	CVE-2026-41066SUSE lxml · Security update for python-lxml MediumEPSS 0.3%2026-05-11GCVE DatabaseCVE-2026-41066 A vulnerability in the lxml library used by recon-ng allows XML External Entity (XXE) attacks via the default configuration of iterparse() and ETCompatXMLParser(). This enables untrusted XML input to read local files. The issue is addressed in lxml 6.1.0 by changing the default resolve_entities setting to 'internal', preventing local file access. Users can also mitigate by explicitly setting resolve_entities to 'internal' or false. EPSS 0.3%Vulnerability SUSE Product Security Team #brew-papis-cve-2026-41066 #homebrew #brew-gtk-doc-cve-2026-41066	GCVE Database	2026-05-11

Page 1 of 1