Executive brief
Reportlab vulnerable to remote code execution
Affected products
- PyPI reportlab
Junglewise Threat Intelligence
CVE-2023-33733: PYSEC-2026-1871 - Reportlab vulnerable to remote code execution
CVE-2023-33733 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: reportlab (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-522 - ReportLab vulnerable to remote code execution via paraparser
- PYSEC-2021-146 - All versions of package reportlab are vulnerable to Server-side Request Forgery (SSRF) via img tags. In order to reduce risk, use trustedSch
- PYSEC-2019-117 - ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document
- PYSEC-2019-47 - ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document