https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T13:08:33.235847+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2019-12761 CVE-2019-12761 2026-10-06T13:08:33.377219+00:00

A code injection issue was discovered in PyXDG before 0.26 via crafted Python code in a Category element of a Menu XML document in a .menu file. XDG_CONFIG_DIRS must be set up to trigger xdg.Menu.parse parsing within the directory containing this file. This is due to a lack of sanitization in xdg/Menu.py before an eval call.

 https://vulnerability.circl.lu/vuln/usn-4700-1 USN-4700-1 — pyxdg vulnerability 2026-10-06T13:08:33.377319+00:00

Affected: Ubuntu:Pro:14.04:LTS: pyxdg, Ubuntu:16.04:LTS: pyxdg, Ubuntu:18.04:LTS: pyxdg

Alexandre D'Hondt discovered that PyXDG did not properly sanitize input. An attacker could exploit this with a crafted .menu file to execute arbitrary code.