python-defusedxml: python-defusedxml (XML bomb protection for Python stdlib modules) python-defusedxml: python-defusedxml: The results of an attack on a vulnerable XML library can be fairly python-defusedxml: dramatic. With just a few hundred Bytes of XML data an attacker can python-defusedxml: occupy several Gigabytes of memory within seconds. An attacker can python-defusedxml: also keep CPUs busy for a long time with a small to medium size python-defusedxml: request. Under some circumstances it is even possible to access local python-defusedxml: files on your server, to circumvent a firewall, or to abuse services python-defusedxml: to rebound attacks to third parties. This library allows for XML to python-defusedxml: be parsed in a manner that avoids these pitfalls. python-defusedxml: