feedparser
Parse feeds in Python
View on Github
Activity
- Latest release
- 1mo ago
- Total releases
- 27
- Cadence
- ~3 months
- Last 12 months
- 2
Reach
- Stars
- 2.4k
Details
- License
- BSD-2-Clause
- First release
- Jun 15, 2007
| Version | Released | |
|---|---|---|
6.0.14
patch
| ||
6.0.13
patch
| ||
6.0.12
patch
| ||
6.0.11
patch
| ||
6.0.10
patch
| ||
6.0.9
patch
| ||
6.0.8
patch
| ||
6.0.7
patch
| ||
6.0.6
patch
| ||
6.0.5
patch
| ||
6.0.4
patch
| ||
6.0.3
patch
| ||
6.0.2
patch
| ||
6.0.1
patch
| ||
6.0.0
major
| ||
6.0.0b3
pre
| ||
6.0.0b2
pre
| ||
6.0.0b1
pre
| ||
5.2.1
patch
| ||
5.2.0
minor
| ||
5.1.3
patch
| ||
5.1.2
patch
| ||
5.1.1
patch
1 CVE
CVE-2012-2921
GHSA-hjf3-r7gw-9rwg
PYSEC-2012-14
Jul 24, 2018
feedparser denial of service vulnerability
High
Network
Low
None
None
Universal Feed Parser (aka feedparser or python-feedparser) before 5.1.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML ENTITY declaration in a non-ASCII encoded document. Affected versions
4.1
5.0
5.0.1
5.1
5.1.1
Fixed in
5.1.2
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
5.1
minor
1 CVE
CVE-2012-2921
GHSA-hjf3-r7gw-9rwg
PYSEC-2012-14
Jul 24, 2018
feedparser denial of service vulnerability
High
Network
Low
None
None
Universal Feed Parser (aka feedparser or python-feedparser) before 5.1.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML ENTITY declaration in a non-ASCII encoded document. Affected versions
4.1
5.0
5.0.1
5.1
5.1.1
Fixed in
5.1.2
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
5.0.1
patch
1 CVE
CVE-2012-2921
GHSA-hjf3-r7gw-9rwg
PYSEC-2012-14
Jul 24, 2018
feedparser denial of service vulnerability
High
Network
Low
None
None
Universal Feed Parser (aka feedparser or python-feedparser) before 5.1.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML ENTITY declaration in a non-ASCII encoded document. Affected versions
4.1
5.0
5.0.1
5.1
5.1.1
Fixed in
5.1.2
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
5.0
major
4 CVEs
CVE-2012-2921
GHSA-hjf3-r7gw-9rwg
PYSEC-2012-14
Jul 24, 2018
feedparser denial of service vulnerability
High
Network
Low
None
None
Universal Feed Parser (aka feedparser or python-feedparser) before 5.1.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML ENTITY declaration in a non-ASCII encoded document. Affected versions
4.1
5.0
5.0.1
5.1
5.1.1
Fixed in
5.1.2
References
Updated Sep 20, 2024 · Source: OSV.dev
CVE-2011-1157
GHSA-2p78-8hh6-96xc
PYSEC-2011-20
Jul 23, 2018
feedparser Cross-site Scripting vulnerability
Medium
Network
Low
None
Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via malformed XML comments. Affected versions
5.0
Fixed in
5.0.1
References Updated Sep 20, 2024 · Source: OSV.dev
CVE-2011-1158
GHSA-4m72-rmm9-2qjr
PYSEC-2011-21
Jul 23, 2018
feedparser Cross-site Scripting vulnerability
Medium
Network
Low
None
Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via an unexpected URI scheme, as demonstrated by a javascript: URI. Affected versions
5.0
Fixed in
5.0.1
References
Updated Sep 20, 2024 · Source: OSV.dev
CVE-2011-1156
GHSA-6h52-4vmh-8x4f
PYSEC-2011-19
Jul 23, 2018
feedparser denial of service vulnerability
High
Network
Low
None
None
feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0.1 allows remote attackers to cause a denial of service (application crash) via a malformed DOCTYPE declaration. Affected versions
4.1
5.0
Fixed in
5.0.1
References
Updated Sep 20, 2024 · Source: OSV.dev | ||
4.1
initial
3 CVEs
CVE-2009-5065
GHSA-3mwg-gp5g-fv3q
PYSEC-2011-18
May 02, 2022
feedparser Cross-site Scripting vulnerability
Medium
Network
Low
None
Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas. Affected versions
4.1
Fixed in
5.0
References
Updated Sep 20, 2024 · Source: OSV.dev
CVE-2012-2921
GHSA-hjf3-r7gw-9rwg
PYSEC-2012-14
Jul 24, 2018
feedparser denial of service vulnerability
High
Network
Low
None
None
Universal Feed Parser (aka feedparser or python-feedparser) before 5.1.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML ENTITY declaration in a non-ASCII encoded document. Affected versions
4.1
5.0
5.0.1
5.1
5.1.1
Fixed in
5.1.2
References
Updated Sep 20, 2024 · Source: OSV.dev
CVE-2011-1156
GHSA-6h52-4vmh-8x4f
PYSEC-2011-19
Jul 23, 2018
feedparser denial of service vulnerability
High
Network
Low
None
None
feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0.1 allows remote attackers to cause a denial of service (application crash) via a malformed DOCTYPE declaration. Affected versions
4.1
5.0
Fixed in
5.0.1
References
Updated Sep 20, 2024 · Source: OSV.dev |