PSF-2018-7
xml package does not obey ignore_environment
On two occasions, the xml package uses environment variables to override
parser / DOM implementations: xml.sax package and xml.dom.domreg
module. On both occasions, the code should not use env vars to override
module names, when the interpreter is started with flags like -E
or -I.
What each source reports
OSV No score
xml package does not obey ignore_environment
On two occasions, the xml package uses environment variables to override
parser / DOM implementations: xml.sax package and xml.dom.domreg
module. On both occasions, the code should not use env vars to override
module names, when the interpreter is started with flags like -E
or -I.
- Record
PSF-2018-7- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
PSF-2018-7 is a vulnerability with no CVSS score yet, published September 24, 2018. No source lists public exploit code. No source names a fixed version.