CVE-2020-29128: Petl Project Petl

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

petl before 1.68, in some configurations, allows resolution of entities in an XML document.

Affected products

• Petl Project Petl: before 1.6.8 (fixed in 1.6.8)

Published 2020-11-26. Last modified 2026-06-17.