PT-2018-19177 · Python · Xml

Published 2018-09-24 · Updated 2018-09-24

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions xml package (affected versions not specified)

Description The issue concerns the xml package's use of environment variables to override parser/DOM implementations, specifically in the xml.sax package and the xml.dom.domreg module. When the interpreter is started with certain flags, such as -E or -I, the code should not use environment variables to override module names.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

PSF-2018-7

Affected Products

Xml

References · 2

• https://osv.dev/vulnerability/PSF-2018-7 · Vendor Advisory
• https://bugs.python.org/issue34791 · Note