B410.md

Pattern: Import of lxml module

Issue: -

Description

Using various methods to parse untrusted XML data is known to be vulnerable to XML attacks. Replace vulnerable imports with the equivalent defusedxml package.

Further Reading

• GitHub - defusedxml
• Bandit - B410: import_lxml