CVE-2022-48565CriticalCVSS 9.8

An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.

Published
October 21, 2026
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2022-48565 →

🎯 Affected products1

  • azl3 python-py 1.11.0-1 on Azure Linux 3.0

✅ Remediation

KBRelease Notes (Security Update)

🔗 References (2)