Vulnerabilities for reportlab

First version without a known vulnerability: 3.6.13

Details

• GHSA-pj98-2xf6-cff52023-09-20

  ReportLab vulnerable to remote code execution via paraparser

  Fixed in: 3.5.31

• GHSA-9q9m-c65c-37pq2023-06-05

  Reportlab vulnerable to remote code execution

  Fixed in: 3.6.13

• GHSA-qpg2-vx7j-38692022-05-24

  XML Injection in ReportLab

  Fixed in: 3.5.28

• GHSA-mpvw-25mg-59vx2021-03-29

  Server-side Request Forgery (SSRF) via img tags in reportlab

  Fixed in: 3.5.55