VulnerableCode Package Details - pkg:pypi/bleach@2.1.0

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:pypi/bleach@2.1.0

Essentials
History (1)

purl	pkg:pypi/bleach@2.1.0
Tags	Ghost

Next non-vulnerable version	3.3.0
Latest non-vulnerable version	3.3.0
Risk	4.5

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-7ae6-tssy-h7h4 Aliases: CVE-2018-7753 GHSA-m9mq-p2f9-cfqv PYSEC-2018-51	An issue was discovered in Bleach 2.1.x before 2.1.3. Attributes that have URI values weren't properly sanitized if the values contained character entities. Using character entities, it was possible to construct a URI value with a scheme that was not allowed that would slide through unsanitized.	2.1.3 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-01T15:57:10.851634+00:00	GHSA Importer	Affected by	VCID-7ae6-tssy-h7h4	https://github.com/advisories/GHSA-m9mq-p2f9-cfqv	38.0.0