CVE-2025-66371Moyenne · CVSS 5EPSS 0,34%Correctif disponibleCVE-2025-66371Peppol-py before 1.1.1 allows XXE attacks because of the Saxon configuration. When validating XML-based invoices, the XML parser could read files from the filesystem and expose their content to a remote host.peppol-pyPythonMettez à jour vers 1.1.1Publication 28 novembre 2025Mise à jour 27 janvier 2026Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗