TI-2019-14012 CVE-2019-19450 · GHSA-pj98-2xf6-cff5
paraparser in ReportLab before 3.5.31 allows remote code execution because start_unichar…
Priority MEDIUM 51
paraparser in ReportLab before 3.5.31 allows remote code execution because start_unichar in paraparser.py evaluates untrusted user input in a unichar element in a crafted XML document with '<unichar code="' followed by a…