CVE-2013-1664: The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom,...

Security readout for executives and security teams

CVE-2013-1664 is a denial-of-service risk in older Python XML libraries. Systems that parse attacker-controlled XML could consume excessive resources or crash when processing malicious entity expansion. The bundle names older OpenStack components and Django as affected users of these libraries, with possible exposure in other products. Exposure is most likely in legacy Python applications or services that parse untrusted XML, especially the named OpenStack Essex, Folsom, and Grizzly components or Django deployments using affected Python XML libraries. Prioritize if legacy OpenStack, Django, or Python XML-processing services remain exposed to untrusted input. Modern patched environments are less likely to be affected, but unsupported legacy systems should be treated as operational availability risk. Mitigation focus: Apply relevant vendor updates from OpenStack, Red Hat, Ubuntu, and Python guidance.; Review Python XML parsing dependencies in legacy services.; Use vendor-supported XML hardening or defusedxml guidance where applicable..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.