Executive brief
XML Entity Expansion (XEE) in Django
Affected products
- PyPI Django
Junglewise Threat Intelligence
CVE-2013-1664: PYSEC-2026-801 - XML Entity Expansion (XEE) in Django
CVE-2013-1664 · Severity: info · Published 2026-07-06
Technologies: Django (PyPI). Vendors: PyPI.
Related threats
- Django GeoDjango unbounded recursion denial of service
- PYSEC-2026-2449 - Django has a Race Condition vulnerability
- PYSEC-2026-1296 - Django vulnerable to partial directory traversal via archives
- Django DomainNameValidator header injection via newline characters
- Django GDALRaster heap buffer over-read in GIS component