USN-7753-1: xmltodict vulnerability
Published Sep 16, 2025
·Updated
Camilo Vera discovered that xmltodict parsed maliciously crafted XML input, contrary to expectations. An attacker could possibly use this issue to cause a denial of service, obtain sensitive information, or execute arbitrary code.
Affected Software
18 affected componentsFixes available
All of the following
ubuntu/python3-xmltodict<0.13.0-1ubuntu0.25.04.1
0.13.0-1ubuntu0.25.04.1
Ubuntu Ubuntu=25.04
All of the following
ubuntu/python3-xmltodict<0.13.0-1ubuntu0.24.04.1
0.13.0-1ubuntu0.24.04.1
Ubuntu Ubuntu=24.04
All of the following
ubuntu/python3-xmltodict<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=22.04
All of the following
ubuntu/python-xmltodict<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=20.04
All of the following
ubuntu/python3-xmltodict<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=20.04
All of the following
ubuntu/python-xmltodict<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=18.04
All of the following
ubuntu/python3-xmltodict<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=18.04
All of the following
ubuntu/python-xmltodict<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=16.04
All of the following
ubuntu/python3-xmltodict<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=16.04
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/python3-xmltodictto a version that resolves this vulnerability.Fixed in 0.13.0-1ubuntu0.25.04.1 - Upgrade
Upgrade
ubuntu/python3-xmltodictto a version that resolves this vulnerability.Fixed in 0.13.0-1ubuntu0.24.04.1 - Upgrade
Upgrade
ubuntu/python3-xmltodictto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/python-xmltodictto a version that resolves this vulnerability.Fixed in Ubuntu Pro
Event History
Sep 16, 2025
Advisory Published
via Ubuntu·12:00 AM
Data Sourced
via Ubuntu·12:00 AM
DescriptionAffected Software