CVE-2013-1665

Advisory

Arrnounced 0.4 replaces XML parser with defusedxml to prevent XML attacks.
https://github.com/weannounce/arrnounced/commit/5a1d186b32162b317b1762b8602342b0b3050bda

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Mostly corrections of bugs, spelling and formatting.

As Python's standard library XML parser implementation is vulnerable to maliciously constructed data the implementation now uses [defusedxml](https://pypi.org/project/defusedxml/).

Resources

• https://pypi.org/project/arrnounced
• https://pyup.io/changelogs/arrnounced/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1665