SOAPpy 0.12.5 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted SOAP request containing a large number of nested entity references.
pypi package report
Is soappy safe?
2 known vulnerabilities, worst severity MODERATE.
// reach
0 direct dependencies
none carry a known advisory
0 packages depend on it
an advisory here reaches each of them
Create a free accountfor every dependency path, dependent and what to upgrade
// ai model usage
No published models are known to use this package.
cvss
0.0
medium
severity band, no base score published
epss
0.00%
medium
chance of exploitation in 30 days, 86th percentile of all CVEs
xyz score
not scored
CyberXYZ composite out of 10
fig. 01 — GHSA-2gh8-gr6x-7q26, the advisory selected below
// 2 advisories
Checked 2026-10-23 at 18:47 UTC. The most recent advisory here was published 2022-05-17. Updated continuously from NVD, GHSA, OSV and CNA feeds.