| Package | Affected versions | Patched versions |
|---|---|---|
| pikepdf | ≥ 1.3.0, < 2.10.0 | 2.10.0 |
| pikepdf | ≥ 1.3.0, ≤ 2.9.2 |
models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free