xmltodict - Debian Package Tracker

A new upstream version is available: 1.0.4 high

A new upstream version 1.0.4 is available, you should consider packaging it.

Created: 2025-11-26 Last update: 2026-04-04 21:31

1 security issue in sid high

1 important issue:

CVE-2025-9375: XML Injection vulnerability in xmltodict allows Input Data Manipulation. This issue affects xmltodict: from 0.14.2 before 0.15.1.

Created: 2025-09-01 Last update: 2025-09-17 23:30

1 security issue in forky high

1 important issue:

CVE-2025-9375: XML Injection vulnerability in xmltodict allows Input Data Manipulation. This issue affects xmltodict: from 0.14.2 before 0.15.1.

Created: 2025-09-01 Last update: 2025-09-17 23:30

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.4 instead of 4.6.1).

Created: 2022-12-17 Last update: 2026-03-31 15:01