$ cve CVE-2020-18705 JSON

CVE-2020-18705

9.8

CRITICAL · CVSS 3.1 · EPSS 2.8% (pctl 86)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'.

CVSS	9.8 (CRITICAL, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	2.77% — more likely to be exploited than 86% of all CVEs
Weakness	CWE-611
On CISA KEV	no
Public exploit	none known
Published	2021-08-16
Last modified	2026-06-17

Vendor	Product
quokka project	quokka