Iteras Peppol-py vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Iteras Peppol-py: 1 record(s), with affected versions and fixes.

CVE-2025-66371 Medium · 5.0 CWE-611 Nov 28, 2025

XML External Entity (XXE) in Iteras Peppol-py

Peppol-py before 1.1.1 allows XXE attacks because of the Saxon configuration. When validating XML-based invoices, the XML parser could read files from the filesystem and expose their content to a remote host.