petl
Python Extract Transform and Load Tables of Data
View on Github
Activity
- Latest release
- 6d ago
- Total releases
- 100
- Cadence
- ~20 days
- Last 12 months
- 8
Reach
- Stars
- 1.3k
Details
- License
- MIT
- First release
- Dec 01, 2011
| Version | Released | |
|---|---|---|
1.7.25
patch
| ||
1.7.24
patch
| ||
1.7.23
patch
| ||
1.7.22
patch
| ||
1.7.21
patch
| ||
1.7.20
patch
| ||
1.7.19
patch
| ||
1.7.18
patch
| ||
1.7.17
patch
| ||
1.7.16
patch
| ||
1.7.15
patch
| ||
1.7.14
patch
| ||
1.7.13
patch
| ||
1.7.12
patch
| ||
1.7.11
patch
| ||
1.7.10
patch
| ||
1.7.9
patch
| ||
1.7.8
patch
| ||
1.7.5
patch
| ||
1.7.7
patch
| ||
1.7.6
patch
| ||
1.7.4
patch
| ||
1.7.3
patch
| ||
1.7.2
patch
| ||
1.7.1
patch
| ||
1.7.0
minor
| ||
1.6.8
patch
| ||
1.6.7
patch
1 CVE
CVE-2020-29128
GHSA-f5gc-p5m3-v347
GHSA-69q2-p9xp-739v
PYSEC-2020-75
Dec 02, 2020
XXE in petl
High
Network
Low
None
None
ImpactInformation Disclosure Summarypetl is a Python library that provides functions for extraction, transformation, and loading (ETL) of data. petl before 1.68, in some configurations, allows resolution of entities in XML input. An attacker who is able to submit XML input to an application using petl can disclose arbitrary files on the file system in the context of the user under which the application is running. Affected ApplicationsApplications that:
MitigationUpdate to petl >= 1.68 Workarounds
References
For more informationIf you have any questions or comments about this advisory:
Thaks to Naveen Sunkavally. Affected versions
0.10
0.10.1
0.10.2
0.11
0.11.1
0.12
0.13
0.13.1
0.14
0.15
0.16
0.16.1
+ 61 more Show less
0.16.2
0.17
0.17.1
0.18
0.18.1
0.19
0.2
0.20
0.21
0.21.2
0.22
0.22.1
0.23
0.24
0.24.1
0.24.2
0.24.3
0.25
0.25.1
0.25.2
0.25.3
0.26
0.3
0.4
0.5
0.6
0.7
0.8
0.9
1.0.0
1.0.0-alpha1
1.0.0a2
1.0.0a3
1.0.0b1
1.0.0b2
1.0.1
1.0.10
1.0.11
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.3.0
1.3.0rc3
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
Fixed in
1.6.8
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
1.6.6
patch
1 CVE
CVE-2020-29128
GHSA-f5gc-p5m3-v347
GHSA-69q2-p9xp-739v
PYSEC-2020-75
Dec 02, 2020
XXE in petl
High
Network
Low
None
None
ImpactInformation Disclosure Summarypetl is a Python library that provides functions for extraction, transformation, and loading (ETL) of data. petl before 1.68, in some configurations, allows resolution of entities in XML input. An attacker who is able to submit XML input to an application using petl can disclose arbitrary files on the file system in the context of the user under which the application is running. Affected ApplicationsApplications that:
MitigationUpdate to petl >= 1.68 Workarounds
References
For more informationIf you have any questions or comments about this advisory:
Thaks to Naveen Sunkavally. Affected versions
0.10
0.10.1
0.10.2
0.11
0.11.1
0.12
0.13
0.13.1
0.14
0.15
0.16
0.16.1
+ 61 more Show less
0.16.2
0.17
0.17.1
0.18
0.18.1
0.19
0.2
0.20
0.21
0.21.2
0.22
0.22.1
0.23
0.24
0.24.1
0.24.2
0.24.3
0.25
0.25.1
0.25.2
0.25.3
0.26
0.3
0.4
0.5
0.6
0.7
0.8
0.9
1.0.0
1.0.0-alpha1
1.0.0a2
1.0.0a3
1.0.0b1
1.0.0b2
1.0.1
1.0.10
1.0.11
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.3.0
1.3.0rc3
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
Fixed in
1.6.8
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
1.6.5
patch
1 CVE
CVE-2020-29128
GHSA-f5gc-p5m3-v347
GHSA-69q2-p9xp-739v
PYSEC-2020-75
Dec 02, 2020
XXE in petl
High
Network
Low
None
None
ImpactInformation Disclosure Summarypetl is a Python library that provides functions for extraction, transformation, and loading (ETL) of data. petl before 1.68, in some configurations, allows resolution of entities in XML input. An attacker who is able to submit XML input to an application using petl can disclose arbitrary files on the file system in the context of the user under which the application is running. Affected ApplicationsApplications that:
MitigationUpdate to petl >= 1.68 Workarounds
References
For more informationIf you have any questions or comments about this advisory:
Thaks to Naveen Sunkavally. Affected versions
0.10
0.10.1
0.10.2
0.11
0.11.1
0.12
0.13
0.13.1
0.14
0.15
0.16
0.16.1
+ 61 more Show less
0.16.2
0.17
0.17.1
0.18
0.18.1
0.19
0.2
0.20
0.21
0.21.2
0.22
0.22.1
0.23
0.24
0.24.1
0.24.2
0.24.3
0.25
0.25.1
0.25.2
0.25.3
0.26
0.3
0.4
0.5
0.6
0.7
0.8
0.9
1.0.0
1.0.0-alpha1
1.0.0a2
1.0.0a3
1.0.0b1
1.0.0b2
1.0.1
1.0.10
1.0.11
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.3.0
1.3.0rc3
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
Fixed in
1.6.8
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
1.6.4
patch
1 CVE
CVE-2020-29128
GHSA-f5gc-p5m3-v347
GHSA-69q2-p9xp-739v
PYSEC-2020-75
Dec 02, 2020
XXE in petl
High
Network
Low
None
None
ImpactInformation Disclosure Summarypetl is a Python library that provides functions for extraction, transformation, and loading (ETL) of data. petl before 1.68, in some configurations, allows resolution of entities in XML input. An attacker who is able to submit XML input to an application using petl can disclose arbitrary files on the file system in the context of the user under which the application is running. Affected ApplicationsApplications that:
MitigationUpdate to petl >= 1.68 Workarounds
References
For more informationIf you have any questions or comments about this advisory:
Thaks to Naveen Sunkavally. Affected versions
0.10
0.10.1
0.10.2
0.11
0.11.1
0.12
0.13
0.13.1
0.14
0.15
0.16
0.16.1
+ 61 more Show less
0.16.2
0.17
0.17.1
0.18
0.18.1
0.19
0.2
0.20
0.21
0.21.2
0.22
0.22.1
0.23
0.24
0.24.1
0.24.2
0.24.3
0.25
0.25.1
0.25.2
0.25.3
0.26
0.3
0.4
0.5
0.6
0.7
0.8
0.9
1.0.0
1.0.0-alpha1
1.0.0a2
1.0.0a3
1.0.0b1
1.0.0b2
1.0.1
1.0.10
1.0.11
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.3.0
1.3.0rc3
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
Fixed in
1.6.8
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
1.6.3
patch
1 CVE
CVE-2020-29128
GHSA-f5gc-p5m3-v347
GHSA-69q2-p9xp-739v
PYSEC-2020-75
Dec 02, 2020
XXE in petl
High
Network
Low
None
None
ImpactInformation Disclosure Summarypetl is a Python library that provides functions for extraction, transformation, and loading (ETL) of data. petl before 1.68, in some configurations, allows resolution of entities in XML input. An attacker who is able to submit XML input to an application using petl can disclose arbitrary files on the file system in the context of the user under which the application is running. Affected ApplicationsApplications that:
MitigationUpdate to petl >= 1.68 Workarounds
References
For more informationIf you have any questions or comments about this advisory:
Thaks to Naveen Sunkavally. Affected versions
0.10
0.10.1
0.10.2
0.11
0.11.1
0.12
0.13
0.13.1
0.14
0.15
0.16
0.16.1
+ 61 more Show less
0.16.2
0.17
0.17.1
0.18
0.18.1
0.19
0.2
0.20
0.21
0.21.2
0.22
0.22.1
0.23
0.24
0.24.1
0.24.2
0.24.3
0.25
0.25.1
0.25.2
0.25.3
0.26
0.3
0.4
0.5
0.6
0.7
0.8
0.9
1.0.0
1.0.0-alpha1
1.0.0a2
1.0.0a3
1.0.0b1
1.0.0b2
1.0.1
1.0.10
1.0.11
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.3.0
1.3.0rc3
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
Fixed in
1.6.8
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
1.6.2
patch
1 CVE
CVE-2020-29128
GHSA-f5gc-p5m3-v347
GHSA-69q2-p9xp-739v
PYSEC-2020-75
Dec 02, 2020
XXE in petl
High
Network
Low
None
None
ImpactInformation Disclosure Summarypetl is a Python library that provides functions for extraction, transformation, and loading (ETL) of data. petl before 1.68, in some configurations, allows resolution of entities in XML input. An attacker who is able to submit XML input to an application using petl can disclose arbitrary files on the file system in the context of the user under which the application is running. Affected ApplicationsApplications that:
MitigationUpdate to petl >= 1.68 Workarounds
References
For more informationIf you have any questions or comments about this advisory:
Thaks to Naveen Sunkavally. Affected versions
0.10
0.10.1
0.10.2
0.11
0.11.1
0.12
0.13
0.13.1
0.14
0.15
0.16
0.16.1
+ 61 more Show less
0.16.2
0.17
0.17.1
0.18
0.18.1
0.19
0.2
0.20
0.21
0.21.2
0.22
0.22.1
0.23
0.24
0.24.1
0.24.2
0.24.3
0.25
0.25.1
0.25.2
0.25.3
0.26
0.3
0.4
0.5
0.6
0.7
0.8
0.9
1.0.0
1.0.0-alpha1
1.0.0a2
1.0.0a3
1.0.0b1
1.0.0b2
1.0.1
1.0.10
1.0.11
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.3.0
1.3.0rc3
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
Fixed in
1.6.8
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
1.6.1
patch
1 CVE
CVE-2020-29128
GHSA-f5gc-p5m3-v347
GHSA-69q2-p9xp-739v
PYSEC-2020-75
Dec 02, 2020
XXE in petl
High
Network
Low
None
None
ImpactInformation Disclosure Summarypetl is a Python library that provides functions for extraction, transformation, and loading (ETL) of data. petl before 1.68, in some configurations, allows resolution of entities in XML input. An attacker who is able to submit XML input to an application using petl can disclose arbitrary files on the file system in the context of the user under which the application is running. Affected ApplicationsApplications that:
MitigationUpdate to petl >= 1.68 Workarounds
References
For more informationIf you have any questions or comments about this advisory:
Thaks to Naveen Sunkavally. Affected versions
0.10
0.10.1
0.10.2
0.11
0.11.1
0.12
0.13
0.13.1
0.14
0.15
0.16
0.16.1
+ 61 more Show less
0.16.2
0.17
0.17.1
0.18
0.18.1
0.19
0.2
0.20
0.21
0.21.2
0.22
0.22.1
0.23
0.24
0.24.1
0.24.2
0.24.3
0.25
0.25.1
0.25.2
0.25.3
0.26
0.3
0.4
0.5
0.6
0.7
0.8
0.9
1.0.0
1.0.0-alpha1
1.0.0a2
1.0.0a3
1.0.0b1
1.0.0b2
1.0.1
1.0.10
1.0.11
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.3.0
1.3.0rc3
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
Fixed in
1.6.8
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
1.6.0
minor
1 CVE
CVE-2020-29128
GHSA-f5gc-p5m3-v347
GHSA-69q2-p9xp-739v
PYSEC-2020-75
Dec 02, 2020
XXE in petl
High
Network
Low
None
None
ImpactInformation Disclosure Summarypetl is a Python library that provides functions for extraction, transformation, and loading (ETL) of data. petl before 1.68, in some configurations, allows resolution of entities in XML input. An attacker who is able to submit XML input to an application using petl can disclose arbitrary files on the file system in the context of the user under which the application is running. Affected ApplicationsApplications that:
MitigationUpdate to petl >= 1.68 Workarounds
References
For more informationIf you have any questions or comments about this advisory:
Thaks to Naveen Sunkavally. Affected versions
0.10
0.10.1
0.10.2
0.11
0.11.1
0.12
0.13
0.13.1
0.14
0.15
0.16
0.16.1
+ 61 more Show less
0.16.2
0.17
0.17.1
0.18
0.18.1
0.19
0.2
0.20
0.21
0.21.2
0.22
0.22.1
0.23
0.24
0.24.1
0.24.2
0.24.3
0.25
0.25.1
0.25.2
0.25.3
0.26
0.3
0.4
0.5
0.6
0.7
0.8
0.9
1.0.0
1.0.0-alpha1
1.0.0a2
1.0.0a3
1.0.0b1
1.0.0b2
1.0.1
1.0.10
1.0.11
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.3.0
1.3.0rc3
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
Fixed in
1.6.8
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
1.5.0
minor
1 CVE
CVE-2020-29128
GHSA-f5gc-p5m3-v347
GHSA-69q2-p9xp-739v
PYSEC-2020-75
Dec 02, 2020
XXE in petl
High
Network
Low
None
None
ImpactInformation Disclosure Summarypetl is a Python library that provides functions for extraction, transformation, and loading (ETL) of data. petl before 1.68, in some configurations, allows resolution of entities in XML input. An attacker who is able to submit XML input to an application using petl can disclose arbitrary files on the file system in the context of the user under which the application is running. Affected ApplicationsApplications that:
MitigationUpdate to petl >= 1.68 Workarounds
References
For more informationIf you have any questions or comments about this advisory:
Thaks to Naveen Sunkavally. Affected versions
0.10
0.10.1
0.10.2
0.11
0.11.1
0.12
0.13
0.13.1
0.14
0.15
0.16
0.16.1
+ 61 more Show less
0.16.2
0.17
0.17.1
0.18
0.18.1
0.19
0.2
0.20
0.21
0.21.2
0.22
0.22.1
0.23
0.24
0.24.1
0.24.2
0.24.3
0.25
0.25.1
0.25.2
0.25.3
0.26
0.3
0.4
0.5
0.6
0.7
0.8
0.9
1.0.0
1.0.0-alpha1
1.0.0a2
1.0.0a3
1.0.0b1
1.0.0b2
1.0.1
1.0.10
1.0.11
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.3.0
1.3.0rc3
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
Fixed in
1.6.8
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
1.4.0
minor
1 CVE
CVE-2020-29128
GHSA-f5gc-p5m3-v347
GHSA-69q2-p9xp-739v
PYSEC-2020-75
Dec 02, 2020
XXE in petl
High
Network
Low
None
None
ImpactInformation Disclosure Summarypetl is a Python library that provides functions for extraction, transformation, and loading (ETL) of data. petl before 1.68, in some configurations, allows resolution of entities in XML input. An attacker who is able to submit XML input to an application using petl can disclose arbitrary files on the file system in the context of the user under which the application is running. Affected ApplicationsApplications that:
MitigationUpdate to petl >= 1.68 Workarounds
References
For more informationIf you have any questions or comments about this advisory:
Thaks to Naveen Sunkavally. Affected versions
0.10
0.10.1
0.10.2
0.11
0.11.1
0.12
0.13
0.13.1
0.14
0.15
0.16
0.16.1
+ 61 more Show less
0.16.2
0.17
0.17.1
0.18
0.18.1
0.19
0.2
0.20
0.21
0.21.2
0.22
0.22.1
0.23
0.24
0.24.1
0.24.2
0.24.3
0.25
0.25.1
0.25.2
0.25.3
0.26
0.3
0.4
0.5
0.6
0.7
0.8
0.9
1.0.0
1.0.0-alpha1
1.0.0a2
1.0.0a3
1.0.0b1
1.0.0b2
1.0.1
1.0.10
1.0.11
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.3.0
1.3.0rc3
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
Fixed in
1.6.8
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
1.3.0
minor
1 CVE
CVE-2020-29128
GHSA-f5gc-p5m3-v347
GHSA-69q2-p9xp-739v
PYSEC-2020-75
Dec 02, 2020
XXE in petl
High
Network
Low
None
None
ImpactInformation Disclosure Summarypetl is a Python library that provides functions for extraction, transformation, and loading (ETL) of data. petl before 1.68, in some configurations, allows resolution of entities in XML input. An attacker who is able to submit XML input to an application using petl can disclose arbitrary files on the file system in the context of the user under which the application is running. Affected ApplicationsApplications that:
MitigationUpdate to petl >= 1.68 Workarounds
References
For more informationIf you have any questions or comments about this advisory:
Thaks to Naveen Sunkavally. Affected versions
0.10
0.10.1
0.10.2
0.11
0.11.1
0.12
0.13
0.13.1
0.14
0.15
0.16
0.16.1
+ 61 more Show less
0.16.2
0.17
0.17.1
0.18
0.18.1
0.19
0.2
0.20
0.21
0.21.2
0.22
0.22.1
0.23
0.24
0.24.1
0.24.2
0.24.3
0.25
0.25.1
0.25.2
0.25.3
0.26
0.3
0.4
0.5
0.6
0.7
0.8
0.9
1.0.0
1.0.0-alpha1
1.0.0a2
1.0.0a3
1.0.0b1
1.0.0b2
1.0.1
1.0.10
1.0.11
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.3.0
1.3.0rc3
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
Fixed in
1.6.8
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
1.3.0rc3
pre
1 CVE
CVE-2020-29128
GHSA-f5gc-p5m3-v347
GHSA-69q2-p9xp-739v
PYSEC-2020-75
Dec 02, 2020
XXE in petl
High
Network
Low
None
None
ImpactInformation Disclosure Summarypetl is a Python library that provides functions for extraction, transformation, and loading (ETL) of data. petl before 1.68, in some configurations, allows resolution of entities in XML input. An attacker who is able to submit XML input to an application using petl can disclose arbitrary files on the file system in the context of the user under which the application is running. Affected ApplicationsApplications that:
MitigationUpdate to petl >= 1.68 Workarounds
References
For more informationIf you have any questions or comments about this advisory:
Thaks to Naveen Sunkavally. Affected versions
0.10
0.10.1
0.10.2
0.11
0.11.1
0.12
0.13
0.13.1
0.14
0.15
0.16
0.16.1
+ 61 more Show less
0.16.2
0.17
0.17.1
0.18
0.18.1
0.19
0.2
0.20
0.21
0.21.2
0.22
0.22.1
0.23
0.24
0.24.1
0.24.2
0.24.3
0.25
0.25.1
0.25.2
0.25.3
0.26
0.3
0.4
0.5
0.6
0.7
0.8
0.9
1.0.0
1.0.0-alpha1
1.0.0a2
1.0.0a3
1.0.0b1
1.0.0b2
1.0.1
1.0.10
1.0.11
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.3.0
1.3.0rc3
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
Fixed in
1.6.8
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
1.2.0
minor
1 CVE
CVE-2020-29128
GHSA-f5gc-p5m3-v347
GHSA-69q2-p9xp-739v
PYSEC-2020-75
Dec 02, 2020
XXE in petl
High
Network
Low
None
None
ImpactInformation Disclosure Summarypetl is a Python library that provides functions for extraction, transformation, and loading (ETL) of data. petl before 1.68, in some configurations, allows resolution of entities in XML input. An attacker who is able to submit XML input to an application using petl can disclose arbitrary files on the file system in the context of the user under which the application is running. Affected ApplicationsApplications that:
MitigationUpdate to petl >= 1.68 Workarounds
References
For more informationIf you have any questions or comments about this advisory:
Thaks to Naveen Sunkavally. Affected versions
0.10
0.10.1
0.10.2
0.11
0.11.1
0.12
0.13
0.13.1
0.14
0.15
0.16
0.16.1
+ 61 more Show less
0.16.2
0.17
0.17.1
0.18
0.18.1
0.19
0.2
0.20
0.21
0.21.2
0.22
0.22.1
0.23
0.24
0.24.1
0.24.2
0.24.3
0.25
0.25.1
0.25.2
0.25.3
0.26
0.3
0.4
0.5
0.6
0.7
0.8
0.9
1.0.0
1.0.0-alpha1
1.0.0a2
1.0.0a3
1.0.0b1
1.0.0b2
1.0.1
1.0.10
1.0.11
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.3.0
1.3.0rc3
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
Fixed in
1.6.8
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
1.1.1
patch
1 CVE
CVE-2020-29128
GHSA-f5gc-p5m3-v347
GHSA-69q2-p9xp-739v
PYSEC-2020-75
Dec 02, 2020
XXE in petl
High
Network
Low
None
None
ImpactInformation Disclosure Summarypetl is a Python library that provides functions for extraction, transformation, and loading (ETL) of data. petl before 1.68, in some configurations, allows resolution of entities in XML input. An attacker who is able to submit XML input to an application using petl can disclose arbitrary files on the file system in the context of the user under which the application is running. Affected ApplicationsApplications that:
MitigationUpdate to petl >= 1.68 Workarounds
References
For more informationIf you have any questions or comments about this advisory:
Thaks to Naveen Sunkavally. Affected versions
0.10
0.10.1
0.10.2
0.11
0.11.1
0.12
0.13
0.13.1
0.14
0.15
0.16
0.16.1
+ 61 more Show less
0.16.2
0.17
0.17.1
0.18
0.18.1
0.19
0.2
0.20
0.21
0.21.2
0.22
0.22.1
0.23
0.24
0.24.1
0.24.2
0.24.3
0.25
0.25.1
0.25.2
0.25.3
0.26
0.3
0.4
0.5
0.6
0.7
0.8
0.9
1.0.0
1.0.0-alpha1
1.0.0a2
1.0.0a3
1.0.0b1
1.0.0b2
1.0.1
1.0.10
1.0.11
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.3.0
1.3.0rc3
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
Fixed in
1.6.8
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
1.1.0
minor
1 CVE
CVE-2020-29128
GHSA-f5gc-p5m3-v347
GHSA-69q2-p9xp-739v
PYSEC-2020-75
Dec 02, 2020
XXE in petl
High
Network
Low
None
None
ImpactInformation Disclosure Summarypetl is a Python library that provides functions for extraction, transformation, and loading (ETL) of data. petl before 1.68, in some configurations, allows resolution of entities in XML input. An attacker who is able to submit XML input to an application using petl can disclose arbitrary files on the file system in the context of the user under which the application is running. Affected ApplicationsApplications that:
MitigationUpdate to petl >= 1.68 Workarounds
References
For more informationIf you have any questions or comments about this advisory:
Thaks to Naveen Sunkavally. Affected versions
0.10
0.10.1
0.10.2
0.11
0.11.1
0.12
0.13
0.13.1
0.14
0.15
0.16
0.16.1
+ 61 more Show less
0.16.2
0.17
0.17.1
0.18
0.18.1
0.19
0.2
0.20
0.21
0.21.2
0.22
0.22.1
0.23
0.24
0.24.1
0.24.2
0.24.3
0.25
0.25.1
0.25.2
0.25.3
0.26
0.3
0.4
0.5
0.6
0.7
0.8
0.9
1.0.0
1.0.0-alpha1
1.0.0a2
1.0.0a3
1.0.0b1
1.0.0b2
1.0.1
1.0.10
1.0.11
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.3.0
1.3.0rc3
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
Fixed in
1.6.8
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
1.0.11
patch
1 CVE
CVE-2020-29128
GHSA-f5gc-p5m3-v347
GHSA-69q2-p9xp-739v
PYSEC-2020-75
Dec 02, 2020
XXE in petl
High
Network
Low
None
None
ImpactInformation Disclosure Summarypetl is a Python library that provides functions for extraction, transformation, and loading (ETL) of data. petl before 1.68, in some configurations, allows resolution of entities in XML input. An attacker who is able to submit XML input to an application using petl can disclose arbitrary files on the file system in the context of the user under which the application is running. Affected ApplicationsApplications that:
MitigationUpdate to petl >= 1.68 Workarounds
References
For more informationIf you have any questions or comments about this advisory:
Thaks to Naveen Sunkavally. Affected versions
0.10
0.10.1
0.10.2
0.11
0.11.1
0.12
0.13
0.13.1
0.14
0.15
0.16
0.16.1
+ 61 more Show less
0.16.2
0.17
0.17.1
0.18
0.18.1
0.19
0.2
0.20
0.21
0.21.2
0.22
0.22.1
0.23
0.24
0.24.1
0.24.2
0.24.3
0.25
0.25.1
0.25.2
0.25.3
0.26
0.3
0.4
0.5
0.6
0.7
0.8
0.9
1.0.0
1.0.0-alpha1
1.0.0a2
1.0.0a3
1.0.0b1
1.0.0b2
1.0.1
1.0.10
1.0.11
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.3.0
1.3.0rc3
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
Fixed in
1.6.8
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
1.0.10
patch
1 CVE
CVE-2020-29128
GHSA-f5gc-p5m3-v347
GHSA-69q2-p9xp-739v
PYSEC-2020-75
Dec 02, 2020
XXE in petl
High
Network
Low
None
None
ImpactInformation Disclosure Summarypetl is a Python library that provides functions for extraction, transformation, and loading (ETL) of data. petl before 1.68, in some configurations, allows resolution of entities in XML input. An attacker who is able to submit XML input to an application using petl can disclose arbitrary files on the file system in the context of the user under which the application is running. Affected ApplicationsApplications that:
MitigationUpdate to petl >= 1.68 Workarounds
References
For more informationIf you have any questions or comments about this advisory:
Thaks to Naveen Sunkavally. Affected versions
0.10
0.10.1
0.10.2
0.11
0.11.1
0.12
0.13
0.13.1
0.14
0.15
0.16
0.16.1
+ 61 more Show less
0.16.2
0.17
0.17.1
0.18
0.18.1
0.19
0.2
0.20
0.21
0.21.2
0.22
0.22.1
0.23
0.24
0.24.1
0.24.2
0.24.3
0.25
0.25.1
0.25.2
0.25.3
0.26
0.3
0.4
0.5
0.6
0.7
0.8
0.9
1.0.0
1.0.0-alpha1
1.0.0a2
1.0.0a3
1.0.0b1
1.0.0b2
1.0.1
1.0.10
1.0.11
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.3.0
1.3.0rc3
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
Fixed in
1.6.8
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
1.0.9
patch
1 CVE
CVE-2020-29128
GHSA-f5gc-p5m3-v347
GHSA-69q2-p9xp-739v
PYSEC-2020-75
Dec 02, 2020
XXE in petl
High
Network
Low
None
None
ImpactInformation Disclosure Summarypetl is a Python library that provides functions for extraction, transformation, and loading (ETL) of data. petl before 1.68, in some configurations, allows resolution of entities in XML input. An attacker who is able to submit XML input to an application using petl can disclose arbitrary files on the file system in the context of the user under which the application is running. Affected ApplicationsApplications that:
MitigationUpdate to petl >= 1.68 Workarounds
References
For more informationIf you have any questions or comments about this advisory:
Thaks to Naveen Sunkavally. Affected versions
0.10
0.10.1
0.10.2
0.11
0.11.1
0.12
0.13
0.13.1
0.14
0.15
0.16
0.16.1
+ 61 more Show less
0.16.2
0.17
0.17.1
0.18
0.18.1
0.19
0.2
0.20
0.21
0.21.2
0.22
0.22.1
0.23
0.24
0.24.1
0.24.2
0.24.3
0.25
0.25.1
0.25.2
0.25.3
0.26
0.3
0.4
0.5
0.6
0.7
0.8
0.9
1.0.0
1.0.0-alpha1
1.0.0a2
1.0.0a3
1.0.0b1
1.0.0b2
1.0.1
1.0.10
1.0.11
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.3.0
1.3.0rc3
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
Fixed in
1.6.8
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
1.0.8
patch
1 CVE
CVE-2020-29128
GHSA-f5gc-p5m3-v347
GHSA-69q2-p9xp-739v
PYSEC-2020-75
Dec 02, 2020
XXE in petl
High
Network
Low
None
None
ImpactInformation Disclosure Summarypetl is a Python library that provides functions for extraction, transformation, and loading (ETL) of data. petl before 1.68, in some configurations, allows resolution of entities in XML input. An attacker who is able to submit XML input to an application using petl can disclose arbitrary files on the file system in the context of the user under which the application is running. Affected ApplicationsApplications that:
MitigationUpdate to petl >= 1.68 Workarounds
References
For more informationIf you have any questions or comments about this advisory:
Thaks to Naveen Sunkavally. Affected versions
0.10
0.10.1
0.10.2
0.11
0.11.1
0.12
0.13
0.13.1
0.14
0.15
0.16
0.16.1
+ 61 more Show less
0.16.2
0.17
0.17.1
0.18
0.18.1
0.19
0.2
0.20
0.21
0.21.2
0.22
0.22.1
0.23
0.24
0.24.1
0.24.2
0.24.3
0.25
0.25.1
0.25.2
0.25.3
0.26
0.3
0.4
0.5
0.6
0.7
0.8
0.9
1.0.0
1.0.0-alpha1
1.0.0a2
1.0.0a3
1.0.0b1
1.0.0b2
1.0.1
1.0.10
1.0.11
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.3.0
1.3.0rc3
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
Fixed in
1.6.8
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
1.0.7
patch
1 CVE
CVE-2020-29128
GHSA-f5gc-p5m3-v347
GHSA-69q2-p9xp-739v
PYSEC-2020-75
Dec 02, 2020
XXE in petl
High
Network
Low
None
None
ImpactInformation Disclosure Summarypetl is a Python library that provides functions for extraction, transformation, and loading (ETL) of data. petl before 1.68, in some configurations, allows resolution of entities in XML input. An attacker who is able to submit XML input to an application using petl can disclose arbitrary files on the file system in the context of the user under which the application is running. Affected ApplicationsApplications that:
MitigationUpdate to petl >= 1.68 Workarounds
References
For more informationIf you have any questions or comments about this advisory:
Thaks to Naveen Sunkavally. Affected versions
0.10
0.10.1
0.10.2
0.11
0.11.1
0.12
0.13
0.13.1
0.14
0.15
0.16
0.16.1
+ 61 more Show less
0.16.2
0.17
0.17.1
0.18
0.18.1
0.19
0.2
0.20
0.21
0.21.2
0.22
0.22.1
0.23
0.24
0.24.1
0.24.2
0.24.3
0.25
0.25.1
0.25.2
0.25.3
0.26
0.3
0.4
0.5
0.6
0.7
0.8
0.9
1.0.0
1.0.0-alpha1
1.0.0a2
1.0.0a3
1.0.0b1
1.0.0b2
1.0.1
1.0.10
1.0.11
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.3.0
1.3.0rc3
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
Fixed in
1.6.8
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
1.0.6
patch
1 CVE
CVE-2020-29128
GHSA-f5gc-p5m3-v347
GHSA-69q2-p9xp-739v
PYSEC-2020-75
Dec 02, 2020
XXE in petl
High
Network
Low
None
None
ImpactInformation Disclosure Summarypetl is a Python library that provides functions for extraction, transformation, and loading (ETL) of data. petl before 1.68, in some configurations, allows resolution of entities in XML input. An attacker who is able to submit XML input to an application using petl can disclose arbitrary files on the file system in the context of the user under which the application is running. Affected ApplicationsApplications that:
MitigationUpdate to petl >= 1.68 Workarounds
References
For more informationIf you have any questions or comments about this advisory:
Thaks to Naveen Sunkavally. Affected versions
0.10
0.10.1
0.10.2
0.11
0.11.1
0.12
0.13
0.13.1
0.14
0.15
0.16
0.16.1
+ 61 more Show less
0.16.2
0.17
0.17.1
0.18
0.18.1
0.19
0.2
0.20
0.21
0.21.2
0.22
0.22.1
0.23
0.24
0.24.1
0.24.2
0.24.3
0.25
0.25.1
0.25.2
0.25.3
0.26
0.3
0.4
0.5
0.6
0.7
0.8
0.9
1.0.0
1.0.0-alpha1
1.0.0a2
1.0.0a3
1.0.0b1
1.0.0b2
1.0.1
1.0.10
1.0.11
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.3.0
1.3.0rc3
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
Fixed in
1.6.8
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
1.0.5
patch
1 CVE
CVE-2020-29128
GHSA-f5gc-p5m3-v347
GHSA-69q2-p9xp-739v
PYSEC-2020-75
Dec 02, 2020
XXE in petl
High
Network
Low
None
None
ImpactInformation Disclosure Summarypetl is a Python library that provides functions for extraction, transformation, and loading (ETL) of data. petl before 1.68, in some configurations, allows resolution of entities in XML input. An attacker who is able to submit XML input to an application using petl can disclose arbitrary files on the file system in the context of the user under which the application is running. Affected ApplicationsApplications that:
MitigationUpdate to petl >= 1.68 Workarounds
References
For more informationIf you have any questions or comments about this advisory:
Thaks to Naveen Sunkavally. Affected versions
0.10
0.10.1
0.10.2
0.11
0.11.1
0.12
0.13
0.13.1
0.14
0.15
0.16
0.16.1
+ 61 more Show less
0.16.2
0.17
0.17.1
0.18
0.18.1
0.19
0.2
0.20
0.21
0.21.2
0.22
0.22.1
0.23
0.24
0.24.1
0.24.2
0.24.3
0.25
0.25.1
0.25.2
0.25.3
0.26
0.3
0.4
0.5
0.6
0.7
0.8
0.9
1.0.0
1.0.0-alpha1
1.0.0a2
1.0.0a3
1.0.0b1
1.0.0b2
1.0.1
1.0.10
1.0.11
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.3.0
1.3.0rc3
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
Fixed in
1.6.8
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
1.0.4
patch
1 CVE
CVE-2020-29128
GHSA-f5gc-p5m3-v347
GHSA-69q2-p9xp-739v
PYSEC-2020-75
Dec 02, 2020
XXE in petl
High
Network
Low
None
None
ImpactInformation Disclosure Summarypetl is a Python library that provides functions for extraction, transformation, and loading (ETL) of data. petl before 1.68, in some configurations, allows resolution of entities in XML input. An attacker who is able to submit XML input to an application using petl can disclose arbitrary files on the file system in the context of the user under which the application is running. Affected ApplicationsApplications that:
MitigationUpdate to petl >= 1.68 Workarounds
References
For more informationIf you have any questions or comments about this advisory:
Thaks to Naveen Sunkavally. Affected versions
0.10
0.10.1
0.10.2
0.11
0.11.1
0.12
0.13
0.13.1
0.14
0.15
0.16
0.16.1
+ 61 more Show less
0.16.2
0.17
0.17.1
0.18
0.18.1
0.19
0.2
0.20
0.21
0.21.2
0.22
0.22.1
0.23
0.24
0.24.1
0.24.2
0.24.3
0.25
0.25.1
0.25.2
0.25.3
0.26
0.3
0.4
0.5
0.6
0.7
0.8
0.9
1.0.0
1.0.0-alpha1
1.0.0a2
1.0.0a3
1.0.0b1
1.0.0b2
1.0.1
1.0.10
1.0.11
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.2.0
1.3.0
1.3.0rc3
1.4.0
1.5.0
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
Fixed in
1.6.8
References
Updated Sep 10, 2026 · Source: OSV.dev |