xml2rfc
PyPI2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting xml2rfcpage 1 of 1
- CVE-2025-11058HIGHEG not assessedfixed in 3.30.12025-08-26
vulnerable: 2.10.0 ... 3.9.1 (195 versions)
xml2rfc has an arbitrary file read vulnerability ### Impact When generating PDF files, this vulnerability allows an attacker to read arbitrary files from the filesystem by injecting malicious link element into the XML. ### Workarounds Te…
- CVE-2025-11059HIGHEG not assessedfixed in 3.30.22025-09-10
vulnerable: 2.10.0 ... 3.9.1 (196 versions)
xml2rfc is vulnerable to arbitrary file reads through prepped files ### Impact When generating PDF files, this vulnerability allows an attacker to read arbitrary files from the filesystem by injecting malicious link element into the prep…
Check whether xml2rfc is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for xml2rfc CVEs against the assets you own.
Book a Demo →