PYSEC-2021-849

See a problem?
Import Source
https://github.com/pypa/advisory-database/blob/main/vulns/pybluemonday/PYSEC-2021-849.yaml
JSON Data
https://api.osv.dev/v1/vulns/PYSEC-2021-849
Aliases
Published
2021-10-18T15:15:00Z
Modified
2023-11-08T04:07:06.825297Z
Summary
[none]
Details

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python (in pybluemonday), does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.

References

Affected packages

PyPI / pybluemonday

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.0.8

Affected versions

0.*

0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.6
0.0.7