CVE-2025-9375

NameCVE-2025-9375
DescriptionXML Injection vulnerability in xmltodict allows Input Data Manipulation.This issue affects xmltodict: 0.14.2.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs1113825

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
python-xmltodict (PTS)bullseye0.12.0-2vulnerable
forky, sid, bookworm, trixie0.13.0-1vulnerable

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
python-xmltodictsource(unstable)(unfixed)1113825

Notes

https://github.com/martinblech/xmltodict/issues/377
https://fluidattacks.com/advisories/mono

Search for package or bug name: Reporting problems