Homepage

sympy@1.12rc1 vulnerabilities

Computer algebra system (CAS) in Python

  • latest version

    1.13.3

  • latest non vulnerable version

    1.13.3

  • first published

    16 years ago

  • latest version published

    3 months ago

  • licenses detected

  • View sympy package health on Snyk Advisor  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the sympy package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    XML External Entity (XXE) Injection

    sympy is a Computer algebra system (CAS) in Python

    Affected versions of this package are vulnerable to XML External Entity (XXE) Injection via the sympy/utilities/mathml/__init__.py file. An attacker could gain unauthorized access to sensitive information by exploiting entities within XML documents.

    How to fix XML External Entity (XXE) Injection?

    Upgrade sympy to version 1.12 or higher.

    [,1.12)
    Go back to all versions of this package