Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-kxh2-721e-tyh2
SummaryIn Mozilla Bleach before 3.1.4, `bleach.clean` behavior parsing style attributes could result in a regular expression denial of service (ReDoS).
Aliases
0
alias CVE-2020-6817
1
alias GHSA-vqhp-cxgc-6wmm
2
alias GMS-2020-698
3
alias PYSEC-2020-340
4
alias SNYK-PYTHON-BLEACH-561754
Fixed_packages
0
url pkg:deb/debian/python-bleach@3.1.4-1?distro=trixie
purl pkg:deb/debian/python-bleach@3.1.4-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-bleach@3.1.4-1%3Fdistro=trixie
1
url pkg:deb/debian/python-bleach@3.2.1-2.1
purl pkg:deb/debian/python-bleach@3.2.1-2.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-bleach@3.2.1-2.1
2
url pkg:deb/debian/python-bleach@3.2.1-2.1?distro=trixie
purl pkg:deb/debian/python-bleach@3.2.1-2.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-bleach@3.2.1-2.1%3Fdistro=trixie
3
url pkg:deb/debian/python-bleach@5.0.1-2?distro=trixie
purl pkg:deb/debian/python-bleach@5.0.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-bleach@5.0.1-2%3Fdistro=trixie
4
url pkg:deb/debian/python-bleach@6.2.0-1?distro=trixie
purl pkg:deb/debian/python-bleach@6.2.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-bleach@6.2.0-1%3Fdistro=trixie
5
url pkg:deb/debian/python-bleach@6.3.0-1?distro=trixie
purl pkg:deb/debian/python-bleach@6.3.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-bleach@6.3.0-1%3Fdistro=trixie
6
url pkg:pypi/bleach@3.1.4
purl pkg:pypi/bleach@3.1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@3.1.4
Affected_packages
0
url pkg:deb/debian/python-bleach@1.4-1
purl pkg:deb/debian/python-bleach@1.4-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ae6-tssy-h7h4
1
vulnerability VCID-92h1-h2vh-xyb6
2
vulnerability VCID-cthk-b1bv-xfbk
3
vulnerability VCID-kxh2-721e-tyh2
4
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-bleach@1.4-1
1
url pkg:deb/debian/python-bleach@2.0-1
purl pkg:deb/debian/python-bleach@2.0-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ae6-tssy-h7h4
1
vulnerability VCID-92h1-h2vh-xyb6
2
vulnerability VCID-cthk-b1bv-xfbk
3
vulnerability VCID-kxh2-721e-tyh2
4
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-bleach@2.0-1
2
url pkg:deb/debian/python-bleach@3.1.2-0%2Bdeb10u2
purl pkg:deb/debian/python-bleach@3.1.2-0%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cthk-b1bv-xfbk
1
vulnerability VCID-kxh2-721e-tyh2
2
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-bleach@3.1.2-0%252Bdeb10u2
3
url pkg:pypi/bleach@0.1
purl pkg:pypi/bleach@0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@0.1
4
url pkg:pypi/bleach@0.1.1
purl pkg:pypi/bleach@0.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@0.1.1
5
url pkg:pypi/bleach@0.1.2
purl pkg:pypi/bleach@0.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@0.1.2
6
url pkg:pypi/bleach@0.2
purl pkg:pypi/bleach@0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@0.2
7
url pkg:pypi/bleach@0.2.1
purl pkg:pypi/bleach@0.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@0.2.1
8
url pkg:pypi/bleach@0.2.2
purl pkg:pypi/bleach@0.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@0.2.2
9
url pkg:pypi/bleach@0.3
purl pkg:pypi/bleach@0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@0.3
10
url pkg:pypi/bleach@0.3.1
purl pkg:pypi/bleach@0.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@0.3.1
11
url pkg:pypi/bleach@0.3.3
purl pkg:pypi/bleach@0.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@0.3.3
12
url pkg:pypi/bleach@0.3.4
purl pkg:pypi/bleach@0.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@0.3.4
13
url pkg:pypi/bleach@0.5.0
purl pkg:pypi/bleach@0.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@0.5.0
14
url pkg:pypi/bleach@0.5.1
purl pkg:pypi/bleach@0.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@0.5.1
15
url pkg:pypi/bleach@1.0.0
purl pkg:pypi/bleach@1.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@1.0.0
16
url pkg:pypi/bleach@1.0.1
purl pkg:pypi/bleach@1.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@1.0.1
17
url pkg:pypi/bleach@1.0.2
purl pkg:pypi/bleach@1.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@1.0.2
18
url pkg:pypi/bleach@1.0.3
purl pkg:pypi/bleach@1.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@1.0.3
19
url pkg:pypi/bleach@1.0.4
purl pkg:pypi/bleach@1.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@1.0.4
20
url pkg:pypi/bleach@1.1.0
purl pkg:pypi/bleach@1.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@1.1.0
21
url pkg:pypi/bleach@1.1.1
purl pkg:pypi/bleach@1.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@1.1.1
22
url pkg:pypi/bleach@1.1.2
purl pkg:pypi/bleach@1.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@1.1.2
23
url pkg:pypi/bleach@1.1.3
purl pkg:pypi/bleach@1.1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@1.1.3
24
url pkg:pypi/bleach@1.1.4
purl pkg:pypi/bleach@1.1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@1.1.4
25
url pkg:pypi/bleach@1.1.5
purl pkg:pypi/bleach@1.1.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@1.1.5
26
url pkg:pypi/bleach@1.2
purl pkg:pypi/bleach@1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@1.2
27
url pkg:pypi/bleach@1.2.1
purl pkg:pypi/bleach@1.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@1.2.1
28
url pkg:pypi/bleach@1.2.2
purl pkg:pypi/bleach@1.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@1.2.2
29
url pkg:pypi/bleach@1.4
purl pkg:pypi/bleach@1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@1.4
30
url pkg:pypi/bleach@1.4.1
purl pkg:pypi/bleach@1.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@1.4.1
31
url pkg:pypi/bleach@1.4.2
purl pkg:pypi/bleach@1.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@1.4.2
32
url pkg:pypi/bleach@1.4.3
purl pkg:pypi/bleach@1.4.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@1.4.3
33
url pkg:pypi/bleach@1.5.0
purl pkg:pypi/bleach@1.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@1.5.0
34
url pkg:pypi/bleach@2.0.0
purl pkg:pypi/bleach@2.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@2.0.0
35
url pkg:pypi/bleach@2.1
purl pkg:pypi/bleach@2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ae6-tssy-h7h4
1
vulnerability VCID-92h1-h2vh-xyb6
2
vulnerability VCID-cthk-b1bv-xfbk
3
vulnerability VCID-kxh2-721e-tyh2
4
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@2.1
36
url pkg:pypi/bleach@2.1.1
purl pkg:pypi/bleach@2.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ae6-tssy-h7h4
1
vulnerability VCID-92h1-h2vh-xyb6
2
vulnerability VCID-cthk-b1bv-xfbk
3
vulnerability VCID-kxh2-721e-tyh2
4
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@2.1.1
37
url pkg:pypi/bleach@2.1.2
purl pkg:pypi/bleach@2.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ae6-tssy-h7h4
1
vulnerability VCID-92h1-h2vh-xyb6
2
vulnerability VCID-cthk-b1bv-xfbk
3
vulnerability VCID-kxh2-721e-tyh2
4
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@2.1.2
38
url pkg:pypi/bleach@2.1.3
purl pkg:pypi/bleach@2.1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@2.1.3
39
url pkg:pypi/bleach@2.1.4
purl pkg:pypi/bleach@2.1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@2.1.4
40
url pkg:pypi/bleach@3.0.0
purl pkg:pypi/bleach@3.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@3.0.0
41
url pkg:pypi/bleach@3.0.1
purl pkg:pypi/bleach@3.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@3.0.1
42
url pkg:pypi/bleach@3.0.2
purl pkg:pypi/bleach@3.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@3.0.2
43
url pkg:pypi/bleach@3.1.0
purl pkg:pypi/bleach@3.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-92h1-h2vh-xyb6
1
vulnerability VCID-cthk-b1bv-xfbk
2
vulnerability VCID-kxh2-721e-tyh2
3
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@3.1.0
44
url pkg:pypi/bleach@3.1.1
purl pkg:pypi/bleach@3.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cthk-b1bv-xfbk
1
vulnerability VCID-kxh2-721e-tyh2
2
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@3.1.1
45
url pkg:pypi/bleach@3.1.2
purl pkg:pypi/bleach@3.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kxh2-721e-tyh2
1
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@3.1.2
46
url pkg:pypi/bleach@3.1.3
purl pkg:pypi/bleach@3.1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kxh2-721e-tyh2
1
vulnerability VCID-mqaz-y2xw-sya2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bleach@3.1.3
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-6817
reference_id
reference_type
scores
0
value 0.00581
scoring_system epss
scoring_elements 0.68918
published_at 2026-04-09T12:55:00Z
1
value 0.00581
scoring_system epss
scoring_elements 0.68928
published_at 2026-04-21T12:55:00Z
2
value 0.00581
scoring_system epss
scoring_elements 0.68948
published_at 2026-04-18T12:55:00Z
3
value 0.00581
scoring_system epss
scoring_elements 0.68938
published_at 2026-04-16T12:55:00Z
4
value 0.00581
scoring_system epss
scoring_elements 0.68898
published_at 2026-04-13T12:55:00Z
5
value 0.00581
scoring_system epss
scoring_elements 0.68927
published_at 2026-04-12T12:55:00Z
6
value 0.00581
scoring_system epss
scoring_elements 0.6887
published_at 2026-04-04T12:55:00Z
7
value 0.00581
scoring_system epss
scoring_elements 0.6885
published_at 2026-04-07T12:55:00Z
8
value 0.00581
scoring_system epss
scoring_elements 0.689
published_at 2026-04-08T12:55:00Z
9
value 0.00581
scoring_system epss
scoring_elements 0.68941
published_at 2026-04-11T12:55:00Z
10
value 0.00581
scoring_system epss
scoring_elements 0.68831
published_at 2026-04-01T12:55:00Z
11
value 0.00581
scoring_system epss
scoring_elements 0.68849
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-6817
1
reference_url https://blog.r2c.dev/posts/finding-python-redos-bugs-at-scale-using-dlint-and-r2c/
reference_id
reference_type
scores
url https://blog.r2c.dev/posts/finding-python-redos-bugs-at-scale-using-dlint-and-r2c/
2
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1623633
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-19T15:21:19Z/
url https://bugzilla.mozilla.org/show_bug.cgi?id=1623633
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6817
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6817
4
reference_url https://github.com/mozilla/bleach
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/mozilla/bleach
5
reference_url https://github.com/mozilla/bleach/releases/tag/v3.1.4
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/mozilla/bleach/releases/tag/v3.1.4
6
reference_url https://github.com/mozilla/bleach/security/advisories/GHSA-vqhp-cxgc-6wmm
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
3
value HIGH
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-19T15:21:19Z/
url https://github.com/mozilla/bleach/security/advisories/GHSA-vqhp-cxgc-6wmm
7
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/bleach/PYSEC-2020-340.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/bleach/PYSEC-2020-340.yaml
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-6817
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-6817
9
reference_url https://snyk.io/vuln/SNYK-PYTHON-BLEACH-561754
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://snyk.io/vuln/SNYK-PYTHON-BLEACH-561754
10
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=955388
reference_id 955388
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=955388
11
reference_url https://github.com/advisories/GHSA-vqhp-cxgc-6wmm
reference_id GHSA-vqhp-cxgc-6wmm
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-vqhp-cxgc-6wmm
12
reference_url https://usn.ubuntu.com/8077-1/
reference_id USN-8077-1
reference_type
scores
url https://usn.ubuntu.com/8077-1/
Weaknesses
0
cwe_id 1333
name Inefficient Regular Expression Complexity
description The product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles.
1
cwe_id 400
name Uncontrolled Resource Consumption
description The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
3
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-kxh2-721e-tyh2