PT-2025-51994

CVE-2025-68463

Published

2025-12-18

Updated

2026-07-07

Description by

CVSS 3.1

4.9

Medium

MetricsAV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions Biopython versions prior to 1.87

Description Bio.Entrez in Biopython allows doctype XML External Entity (XXE), which is a technique where an XML parser is tricked into processing external entities within a document type definition, potentially leading to unauthorized access to local files or server-side request forgery.

Recommendations Update to version 1.87.

Exploitability

Exploit

Fix

Impacts

Researchers

Hartwork

Sebastian

Vendors

Affected products

Weakness enumeration

CWE-611: Improper Restriction of XML External Entity Reference