| BDSA-2025-73825 |
|
Medium |
Dec 23, 2025 |
Biopython is vulnerable to XML external entity (XXE) injection due to improper handling of XML parsing in the `Bio.Entrez.DataHandler`, `Bio.Entrez.rea
more...
Biopython is vulnerable to XML external entity (XXE) injection due to improper handling of XML parsing in the `Bio.Entrez.DataHandler`, `Bio.Entrez.read`, and `Bio.Entrez.parse` components. This could allow an attacker to perform arbitrary HTTP GET requests, potentially leading to server-side request forgery (SSRF), access to internal network resources, or denial-of-service (DoS) attacks.
less...
|
|