Search for packages
| purl | pkg:deb/debian/python-bleach@3.2.1-2.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-cthk-b1bv-xfbk | In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA and either svg or math tags are whitelisted and the keyword argument strip=False. |
CVE-2020-6816
GHSA-m6xf-fq7q-8743 PYSEC-2020-28 |
| VCID-kxh2-721e-tyh2 | In Mozilla Bleach before 3.1.4, `bleach.clean` behavior parsing style attributes could result in a regular expression denial of service (ReDoS). |
CVE-2020-6817
GHSA-vqhp-cxgc-6wmm GMS-2020-698 PYSEC-2020-340 SNYK-PYTHON-BLEACH-561754 |
| VCID-mqaz-y2xw-sya2 | In Mozilla Bleach before 3.3.0, a mutation XSS affects users calling bleach.clean with math or svg; p or br; and style, title, noscript, script, textarea, noframes, iframe, or xmp tags with strip_comments=False. |
CVE-2021-23980
GHSA-vv2x-vrpj-qqpq GMS-2021-168 PYSEC-2021-865 |