Known vulnerabilities in python-defusedxml

Vendor: SUSE
Software CPE: cpe:2.3:o:suse:python-defusedxml:*:*:*:*:*:suse_linux:*:*
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting python-defusedxml python-defusedxml is affected by 10 known vulnerabilities: 6 medium, 4 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120229 - Improper Authentication
CVE-2025-62349
CWE-287 Low
No
No
0.6.0-150052.4.2.1 19.12.2025 SB2025121950
SB2025121951
SB2025121952
and 32 more
#VU120228 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-62348
CWE-94 Medium
No
No
0.6.0-150052.4.2.1 19.12.2025 SB2025121950
SB2025121951
SB2025121952
and 32 more
#VU119885 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2025-67724
CWE-644 Low
No
No
0.6.0-150052.4.2.1 12.12.2025 SB2025121205
SB2026010587
SB2026010938
and 35 more
#VU119884 - Excessive Iteration
CVE-2025-67725
CWE-834 Low
No
No
0.6.0-150052.4.2.1 12.12.2025 SB2025121205
SB2026010587
SB2026010938
and 41 more
#VU119883 - Excessive Iteration
CVE-2025-67726
CWE-834 Medium
No
No
0.6.0-150052.4.2.1 12.12.2025 SB2025121205
SB2025123045
SB2026010587
and 41 more
#VU118722 - Allocation of Resources Without Limits or Throttling
CVE-2025-47908
CWE-770 Medium
No
No
0.6.0-120002.1.3.1 24.11.2025 SB2025112452
SB2025112453
SB2025112454
and 2 more
#VU113081 - Exposure of sensitive information to an unauthorized actor
CVE-2025-3415
CWE-200 Medium
No
No
0.6.0-120002.1.3.1 21.07.2025 SB2025072113
SB2025112453
SB2025112454
and 3 more
#VU113080 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2025-6197
CWE-601 Low
No
No
0.6.0-120002.1.3.1 21.07.2025 SB2025072114
SB2025112453
SB2025112454
#VU113079 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2025-6023
CWE-601 Medium
No
No
0.6.0-120002.1.3.1 21.07.2025 SB2025072114
SB2025112453
SB2025112454
#VU61599 - Improper input validation
CVE-2022-21698
CWE-20 Medium
No
No
0.6.0-120002.1.3.1 24.03.2022 SB2022021530
SB2022032413
SB2022040807
and 110 more