VYPR
High severity8.8NVD Advisory· Published Dec 21, 2016· Updated Jun 17, 2026

CVE-2016-5851

CVE-2016-5851

Description

python-docx before 0.8.6 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted document.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
python-docxPyPI
< 0.8.60.8.6

Affected products

2

Patches

Vulnerability mechanics

References

15

News mentions

0

No linked articles in our index yet.