Duplicate Advisory: Improper Restriction of XML External Entity Reference in pikepdf
Date: 2022-10
Affected: pip/pikepdf
Attack vector: other
Category: vulnerability-disclosure
Severity: Critical
CVE: CVE-2021-46849
CWE: CWE-611
CVSS: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29421, GHSA-ccgm-3xw4-h5p8. Reason: This candidate is a duplicate of CVE-2021-29421. Notes: All CVE users should reference CVE-2021-29421 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.


Mitigations:

Architectural layers (MAESTRO):