Executive brief
XML External Entity (XXE) in Django
Affected products
- PyPI Django
Junglewise Threat Intelligence
CVE-2013-1665: PYSEC-2026-802 - XML External Entity (XXE) in Django
CVE-2013-1665 · Severity: info · Published 2026-07-06
Technologies: Django (PyPI). Vendors: PyPI.
Related threats
- Django GeoDjango unbounded recursion denial of service
- PYSEC-2026-2449 - Django has a Race Condition vulnerability
- PYSEC-2026-1296 - Django vulnerable to partial directory traversal via archives
- Django DomainNameValidator header injection via newline characters
- Django GDALRaster heap buffer over-read in GIS component