cve.bz

CVE-2021-23418

9.8 criticalEPSS 1.7%

Critical (9.8) in glances project glances. EPSS 1.7% chance of exploitation in the next 30 days. Fixed in glances 3.2.1.

The package glances before 3.2.1 are vulnerable to XML External Entity (XXE) Injection via the use of Fault to parse untrusted XML data, which is known to be vulnerable to XML attacks.

Severity

CVSS 3.1

9.8 critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWE
CWE-611
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-r2mj-8wgq-73m6PyPIglances<3.2.13.2.1
PYSEC-2021-115PyPIglances<3.2.13.2.1

References

Check your stackJSON