l
lxml
Security Risk Profile
43
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 9 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 14, 2014 to present
9
Total CVEs
4
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
6.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
43/100
medium
Severity Distribution
Critical
0High
4Medium
5Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
5
2
XEE
2
3
Null Pointer Dereference
2
4
Command Injection
1
Most Affected Products
1. lxml lxml104
2. alpine/py3-lxml43
3. alpine/libxml212
4. debian/lxml10
5. Fedoraproject Fedora8
Recent Vulnerabilities
See more →CVE-2026-41066
CVSS 7.5high
lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files
Apr 21, 2026
CVE-2025-6985
CVSS 7.5high
XXE Vulnerability in langchain-ai/langchain
Oct 6, 2025
REDHAT-BUG-2107571
CVSS 4.0medium
Jul 15, 2022🔧 No Patch
CVE-2022-2309
CVSS 7.5high
NULL Pointer Dereference in lxml/lxml
Jul 5, 2022
CVE-2021-43818
CVSS 8.8high
HTML Cleaner allows crafted and SVG embedded scripts to pass through
Dec 12, 2021
CVE-2021-28957
CVSS 6.1medium
Mar 21, 2021
CVE-2020-27783
CVSS 6.1medium
Oct 18, 2020
CVE-2018-19787
CVSS 6.1medium
Dec 2, 2018
CVE-2014-3146
CVSS 6.1medium
May 14, 2014
Monitor lxml in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.