Known vulnerabilities in python3-defusedxml

Known vulnerabilities in python3-defusedxml

Vendor: SUSE

Software: python3-defusedxml

Software CPE: cpe:2.3:o:suse:python3-defusedxml:*:*:*:*:*:suse_linux:*:*

Website: https://www.suse.com/

Total vulnerabilities: 14

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (14)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU124876 - Inefficient Regular Expression Complexity CVE-2026-25547	CWE-1333	Low	No	No	0.7.1-159000.4.2.1	06.04.2026	SB2026040628 SB2026040631 SB2026040632 and 13 more
#VU123311 - Improper Control of Generation of Code ('Code Injection') CVE-2026-1615	CWE-94	High	No	No	0.7.1-159000.4.2.1	27.02.2026	SB2026022707 SB2026022708 SB2026032720 and 4 more
#VU123310 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2025-61140	CWE-1321	High	No	No	0.7.1-159000.4.2.1	27.02.2026	SB2026022706 SB2026022708 SB2026030405 and 3 more
#VU123174 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-27606	CWE-22	High	Available	No	0.7.1-159000.4.2.1	24.02.2026	SB2026022445 SB2026040631 SB2026040632 and 2 more
#VU122756 - Improper Access Control CVE-2026-21722	CWE-284	Low	No	No	0.7.1-159000.4.2.1	12.02.2026	SB2026021238 SB20260325198 SB2026040631 and 1 more
#VU120229 - Improper Authentication CVE-2025-62349	CWE-287	Low	No	No	0.7.1-159000.4.2.1	19.12.2025	SB2025121950 SB2025121951 SB2025121952 and 32 more
#VU120228 - Improper Control of Generation of Code ('Code Injection') CVE-2025-62348	CWE-94	Medium	No	No	0.7.1-159000.4.2.1	19.12.2025	SB2025121950 SB2025121951 SB2025121952 and 32 more
#VU119885 - Improper Neutralization of HTTP Headers for Scripting Syntax CVE-2025-67724	CWE-644	Low	No	No	0.7.1-159000.4.2.1	12.12.2025	SB2025121205 SB2026010587 SB2026010938 and 35 more
#VU119884 - Excessive Iteration CVE-2025-67725	CWE-834	Low	No	No	0.7.1-159000.4.2.1	12.12.2025	SB2025121205 SB2026010587 SB2026010938 and 41 more
#VU119883 - Excessive Iteration CVE-2025-67726	CWE-834	Medium	No	No	0.7.1-159000.4.2.1	12.12.2025	SB2025121205 SB2025123045 SB2026010587 and 41 more
#VU118722 - Allocation of Resources Without Limits or Throttling CVE-2025-47908	CWE-770	Medium	No	No	0.7.1-150002.1.3.2	24.11.2025	SB2025112452 SB2025112453 SB2025112454 and 2 more
#VU113081 - Exposure of sensitive information to an unauthorized actor CVE-2025-3415	CWE-200	Medium	No	No	0.7.1-150002.1.3.2, 0.7.1-159000.4.2.1	21.07.2025	SB2025072113 SB2025112453 SB2025112454 and 3 more
#VU113080 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2025-6197	CWE-601	Low	No	No	0.7.1-150002.1.3.2	21.07.2025	SB2025072114 SB2025112453 SB2025112454
#VU113079 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2025-6023	CWE-601	Medium	No	No	0.7.1-150002.1.3.2	21.07.2025	SB2025072114 SB2025112453 SB2025112454