CVE-2025-68463

Опубликовано: 18 дек. 2025

Источник: nvd

CVSS3: 4.9

EPSS Низкий

Описание

Bio.Entrez in Biopython through 186 allows doctype XXE.

Ссылки

https://github.com/biopython/biopython/blob/master/NEWS.rst
https://github.com/biopython/biopython/commit/736c96f37b190732ecca9da80ad0cb9d4967214d
https://github.com/biopython/biopython/issues/5109
https://pypi.org/project/biopython/1.87/
http://www.openwall.com/lists/oss-security/2026/05/08/16

EPSS

Процентиль: 25%

0.0032

Низкий

4.9 Medium

CVSS3

Дефекты

CWE-611

Связанные уязвимости

CVE-2025-68463

CVSS3: 4.9

ubuntu

8 месяцев назад

Bio.Entrez in Biopython through 186 allows doctype XXE.

CVE-2025-68463

CVSS3: 7.1

redhat

8 месяцев назад

Bio.Entrez in Biopython through 186 allows doctype XXE.

CVE-2025-68463

CVSS3: 4.9

debian

8 месяцев назад

Bio.Entrez in Biopython through 186 allows doctype XXE.

openSUSE-SU-2026:21169-1

suse-cvrf

около 2 месяцев назад

Security update for python-biopython

GHSA-x3vf-39hj-gxr4

CVSS3: 4.9

github

8 месяцев назад

Biopython is vulnerable to doctype XML external entity (XXE) injection through Bio.Entrez

EPSS

Процентиль: 25%

0.0032

Низкий

4.9 Medium

CVSS3

Дефекты

CWE-611