{"id":"PYSEC-2021-349","details":"XXE vulnerability in 'XML2Dict' version 0.2.2 allows an attacker to cause a denial of service.","aliases":["CVE-2021-25951","GHSA-gp6m-vqhm-5cm5"],"modified":"2023-11-08T04:05:18.321407Z","published":"2021-06-30T12:15:00Z","references":[{"type":"WEB","url":"https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25951"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-gp6m-vqhm-5cm5"}],"affected":[{"package":{"name":"xml2dict","ecosystem":"PyPI","purl":"pkg:pypi/xml2dict"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.1","0.1.1","0.2.1","0.2.2"],"database_specific":{"source":"https://github.com/pypa/advisory-database/blob/main/vulns/xml2dict/PYSEC-2021-349.yaml"}}],"schema_version":"1.7.3"}