CVE-2025-68463CWE-611xxe

CVE-2025-68463

Medium · published December 18, 2025

CVSS v3.1
4.9
EPSS
0%
Percentile
23.2
In the wild
Unconfirmed
What it is

Bio.Entrez in Biopython through 186 allows doctype XXE.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00316 · 23.2th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2025-12-18T11:15Z
References (5)
https://github.com/biopython/biopython/blob/master/NEWS.rst · [email protected]https://github.com/biopython/biopython/commit/736c96f37b190732ecca9da80ad0cb9d4967214d · [email protected]https://github.com/biopython/biopython/issues/5109 · [email protected]https://pypi.org/project/biopython/1.87/ · [email protected]http://www.openwall.com/lists/oss-security/2026/05/08/16 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 18 DEC 05:40Z
    Bio.Entrez in Biopython through 186 allows doctype XXE
    cvelistv5