CVE-2013-1665

Advisory

Genbadge 1.0.0 starts to use 'defusedxml' to fix a known vulnerability. See: <https://github.com/smarie/python-genbadge/issues/11>.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

- The tests badge now simplifies when the success rate is 100%, which is the case in the vast majority of projects. Fixes [12](https://github.com/smarie/python-genbadge/issues/12)

- Now using `defusedxml` to fix a [known vulnerability](https://docs.python.org/3/library/xml.etree.elementtree.html). Fixes [#11](https://github.com/smarie/python-genbadge/issues/11)

Resources

• https://pypi.org/project/genbadge
• https://pyup.io/changelogs/genbadge/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1665