CVE-2020-6817
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2020-6817
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-6817.json
- Aliases
-
- GHSA-vqhp-cxgc-6wmm
- PYSEC-2020-340
- SNYK-PYTHON-BLEACH-561754
- Related
- Published
- 2023-02-16T22:15:10Z
- Modified
- 2023-11-29T08:35:10.818294Z
- Details
-
bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to bleach.clean with an allowed tag with an allowed style attribute are vulnerable to ReDoS. For example, bleach.clean(..., attributes={'a': ['style']}).
- References