Skip to content

PatchFirst · Latest vulnerabilities

peppol-py vulnerabilities

Vulnerabilities published for peppol-py in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerability: 1

CVE-2025-66371
Medium · CVSS 5EPSS 0.34%Fix available
CVE-2025-66371
Peppol-py before 1.1.1 allows XXE attacks because of the Saxon configuration. When validating XML-based invoices, the XML parser could read files from the filesystem and expose their content to a remote host.
peppol-py Python
- Update to 1.1.1
Published November 28, 2025Updated January 27, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →