← All advisories

Medium severity4.9OSV Advisory· Published Dec 18, 2025· Updated Jun 17, 2026

CVE-2025-68463

CVE-2025-68463

Description

Bio.Entrez in Biopython through 186 allows doctype XXE.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
biopythonPyPI	<= 1.86	—

Affected products

4

Biopython/BiopythonOSV
Range: biopython-090d01, biopython-090d02, biopython-100a1, …
ghsa-coords3 versions
pkg:pypi/biopython pkg:rpm/opensuse/python-biopython&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/python-biopython&distro=openSUSE%20Tumbleweed
<= 1.86+ 2 more
- (no CPE)range: <= 1.86
- (no CPE)range: < 1.85-bp160.2.1
- (no CPE)range: < 1.87-1.1

Patches

Vulnerability mechanics

References

8

github.com/advisories/GHSA-x3vf-39hj-gxr4ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2025-68463ghsaADVISORY
www.openwall.com/lists/oss-security/2026/05/08/16nvdWEB
github.com/biopython/biopython/blob/master/NEWS.rstnvdWEB
github.com/biopython/biopython/commit/736c96f37b190732ecca9da80ad0cb9d4967214dnvdWEB
github.com/biopython/biopython/issues/5109nvdWEB
pypi.org/project/biopython/1.87ghsaWEB
pypi.org/project/biopython/1.87/nvd

News mentions

0

No linked articles in our index yet.