Executive brief
xml2rfc is vulnerable to arbitrary file reads through prepped files
Affected products
- PyPI xml2rfc
Junglewise Threat Intelligence
CVE-2025-11059: PYSEC-2026-2057 - xml2rfc is vulnerable to arbitrary file reads through prepped files
CVE-2025-11059 · Severity: medium · CVSS 4 · Published 2026-07-07
Technologies: xml2rfc (PyPI). Vendors: PyPI.