Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-2614
  • PyPI/lxml-html-clean
 `lxml_html_clean.Cleaner` does not strip `javascript:` URLs from namespaced URL attributes 13 Jul
  • Fix available
  • Severity - 8.2 (High)
GHSA-4jhm-jv67-739f
  • PyPI/lxml-html-clean
 `lxml_html_clean.Cleaner` does not strip `javascript:` URLs from namespaced URL attributes 08 Jul
  • Fix available
  • Severity - 8.2 (High)
PYSEC-2026-2202
  • PyPI/lxml-html-clean
 See record for full details 05 Mar
  • Fix available
  • Severity - 6.1 (Medium)
PYSEC-2026-2201
  • PyPI/lxml-html-clean
 See record for full details 05 Mar
  • Fix available
  • Severity - 6.1 (Medium)
GHSA-xvp8-3mhv-424c
  • PyPI/lxml-html-clean
 lxml-html-clean has <base> tag injection through default Cleaner configuration 02 Mar
  • Fix available
  • Severity - 6.1 (Medium)
GHSA-hw26-mmpg-fqfg
  • PyPI/lxml-html-clean
 lxml-html-clean has CSS @import Filter Bypass via Unicode Escapes 02 Mar
  • Fix available
  • Severity - 6.1 (Medium)
PYSEC-2024-160
  • PyPI/lxml-html-clean
  • github.com/fedora-python/lxml_html_clean
 See record for full details 19 Nov 2024
  • Fix available
  • Severity - 6.1 (Medium)
GHSA-5jfw-gq64-q45f
  • PyPI/lxml-html-clean
 HTML Cleaner allows crafted scripts in special contexts like svg or math to pass through 19 Nov 2024
  • Fix available
  • Severity - 7.7 (High)