Ebookmeta vulnerabilities

2 known vulnerabilities in Ebookmeta from Dnkorpushov. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  lxml: Improper Restriction of XML External Entity Reference

  CVE-2024-37388Jun 7, 2024Lxml

  An XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of lxml before v4.9.1 allows attackers to access sensitive information or cause a Denial of Service (DoS) via crafted XML input.

• 7.5 High severity

  Ebookmeta: Improper Restriction of XML External Entity Reference

  CVE-2024-36827Jun 7, 2024Dnkorpushov

  An XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of ebookmeta before v1.2.8 allows attackers to access sensitive information or cause a Denial of Service (DoS) via crafted XML input.