CVE-2014-3243
makina-corpus soappy: no CVSS score yet. EPSS 2.7% chance of exploitation in the next 30 days. Fixed in soappy 0.12.6.
SOAPpy 0.12.5 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted SOAP request containing a large number of nested entity references.
- EPSS
- 2.7% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
- CWE
- CWE-119
- Published
- Modified
- Record from
- the NVD, synced
Affected
- makina-corpus:soappy
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-2gh8-gr6x-7q26 | PyPI | soappy | <0.12.6 | 0.12.6 |
| PYSEC-2026-923 | PyPI | soappy | <0.12.6 | 0.12.6 |