{"id":"CVE-2025-68463","title":"Bio.Entrez in Biopython through 186 allows doctype XXE.","summary":"Bio.Entrez in Biopython through 186 allows doctype XXE.","severity":"medium","cvss":4.9,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:L","cwe":["CWE-611"],"vendor":"biopython","product":"biopython","affected":["biopython <= 1.86"],"published":"2025-12-18","updated":"2026-10-13","sourceUpdated":"2026-10-13T11:10:00.203","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-68463","references":[{"url":"https://github.com/biopython/biopython/blob/master/NEWS.rst","label":"cve@mitre.org"},{"url":"https://github.com/biopython/biopython/commit/736c96f37b190732ecca9da80ad0cb9d4967214d","label":"cve@mitre.org"},{"url":"https://github.com/biopython/biopython/issues/5109","label":"cve@mitre.org"},{"url":"https://pypi.org/project/biopython/1.87/","label":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2026/05/08/16","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68463"},{"url":"https://github.com/biopython/biopython"},{"url":"https://pypi.org/project/biopython/1.87"}],"tags":["nvd","osv","pip"],"epss":0.00316,"epssPercentile":0.24346,"aliases":["GHSA-x3vf-39hj-gxr4","PYSEC-2026-1221"],"ecosystem":"pip","ingestedAt":"2026-07-08T18:25:54.101Z","slug":"CVE-2025-68463","body":"## Overview\n\nBio.Entrez in Biopython through 186 allows doctype XXE.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Package advisory (CVE-2025-68463)\n\nAffected packages:\n\n- `biopython <= 1.86`\n\nSource: https://osv.dev/vulnerability/GHSA-x3vf-39hj-gxr4","depth":"sunlit","depthScore":27,"depthScoreParts":{"impact":27,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}