critical9.8
CVE-2021-46849
Duplicate Advisory: Improper Restriction of XML External Entity Reference in pikepdf
Impact
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29421, GHSA-ccgm-3xw4-h5p8. Reason: This candidate is a duplicate of CVE-2021-29421. Notes: All CVE users should reference CVE-2021-29421 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | pikepdf | >= 1.2.0, < 2.10.0 | 2.10.0 |