Homepage
About Snyk

ladon@0.8.2 vulnerabilities

Serve your python methods to several web service interfaces at once, including JSON-WSP, SOAP and JSON-RPC.

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the ladon package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
XML External Entity (XXE) Injection

ladon is a framework for exposing python methods to several internet service protocols.

Affected versions of this package are vulnerable to XML External Entity (XXE) Injection. The vulnerability exploits the XML External Entity (XXE) processing in the SOAP request handlers. For instance, an attacker could send a specially crafted SOAP call to craft request handlers, resulting in the attacker being able to read files and pivot to other internal endpoints.

How to fix XML External Entity (XXE) Injection?

There is no fixed version for ladon.

[0.6.1,)
Go back to all versions of this package