Python-openxml Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Python-openxml Project records in CISA KEV

No Python-openxml Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Python-docx · all components

TI-2016-05076 CVE-2016-5851 · GHSA-34wj-p5jm-2p96

MEDIUM 43

python-docx before 0.8.6 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted document.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02354 Published 2016-12-21 Fixed in 0.8.6 CWE-611