CVE-2011-1156: feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0.1 allows remote att...

Security readout for executives and security teams

CVE-2011-1156 is a remote denial-of-service issue in Universal Feed Parser before 5.0.1. A malformed DOCTYPE in a feed can crash an application that parses it. Business impact is availability, not data theft, and urgency depends on whether external or user-supplied feeds are processed. Exposure is likely where Python applications parse untrusted RSS or Atom feeds using feedparser before 5.0.1. Internet-facing feed ingestion, automated content import, and user-submitted feed URLs raise relevance. The bundle lists no CPEs or complete vendor/product inventory. Prioritize remediation for systems that ingest external feeds and support customer-facing or operational workflows. For internal-only tools with no untrusted feed input, schedule with routine dependency maintenance. Mitigation focus: Upgrade Universal Feed Parser/python-feedparser to 5.0.1 or later.; Apply relevant distribution security updates from supported vendors.; Reduce or disable parsing of untrusted feeds until patched..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.