{"id":"PSF-2018-7","aliases":[],"status":"published","title":"xml package does not obey ignore_environment","description":"On two occasions, the xml package uses environment variables to override\nparser / DOM implementations: ``xml.sax package`` and ``xml.dom.domreg``\nmodule. On both occasions, the code should not use env vars to override\nmodule names, when the interpreter is started with flags like ``-E``\nor ``-I``.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2018-09-24T00:00:00Z","modified":"2025-10-09T00:58:11Z","references":[{"url":"https://bugs.python.org/issue34791","tags":["report"]}],"sources":{"osv":[{"id":"PSF-2018-7","title":"xml package does not obey ignore_environment","description":"On two occasions, the xml package uses environment variables to override\nparser / DOM implementations: ``xml.sax package`` and ``xml.dom.domreg``\nmodule. On both occasions, the code should not use env vars to override\nmodule names, when the interpreter is started with flags like ``-E``\nor ``-I``.\n","status":"published","published":"2018-09-24T00:00:00Z","modified":"2025-10-09T00:58:11.186537Z","updated_at":"2026-11-02T15:52:50.263679Z"}]}}