CVE-2020-26709: Py-XML Project Py-XML

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

py-xml v1.0 was discovered to contain an XML External Entity Injection (XXE) vulnerability which allows attackers to execute arbitrary code via a crafted XML file.

Affected products

• Py-XML Project Py-XML: version 1.0 only

Published 2023-06-29. Last modified 2026-06-17.