CVE-2021-25951

7.5 highEPSS 1.2%

High (7.5) in xml2dict project xml2dict. EPSS 1.2% chance of exploitation in the next 30 days.

XXE vulnerability in 'XML2Dict' version 0.2.2 allows an attacker to cause a denial of service.

Severity

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-611
Published: 2021-06-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-gp6m-vqhm-5cm5	PyPI	xml2dict	<=0.2.2	no fix published
PYSEC-2021-349	PyPI	xml2dict	all versions	no fix published