python310-defusedxml
Python 3.10 - defusedxml - XML bomb protection
3.4.2
2023-07-15
eisfair-noarch
the eisfair team, team(at)eisfair(dot)org
stable
python310-base 3.4.2
Internal Program Version: defusedxml 0.7.1
The results of an attack on a vulnerable XML library can be fairly dramatic.
With just a few hundred bytes of XML data an attacker can occupy several
gigabytes of memory within seconds. An attacker can also keep
CPUs busy for a long time with a small to medium size request.
This library allows for XML to be parsed in a manner that avoids these
pitfalls.
https://pypi.python.org/pypi/defusedxml