Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/bleach@3.1.3
purl pkg:pypi/bleach@3.1.3
Next non-vulnerable version 3.3.0
Latest non-vulnerable version 3.3.0
Risk 4.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-kxh2-721e-tyh2
Aliases:
CVE-2020-6817
GHSA-vqhp-cxgc-6wmm
GMS-2020-698
PYSEC-2020-340
SNYK-PYTHON-BLEACH-561754
In Mozilla Bleach before 3.1.4, `bleach.clean` behavior parsing style attributes could result in a regular expression denial of service (ReDoS).
3.1.4
Affected by 1 other vulnerability.
VCID-mqaz-y2xw-sya2
Aliases:
CVE-2021-23980
GHSA-vv2x-vrpj-qqpq
GMS-2021-168
PYSEC-2021-865
In Mozilla Bleach before 3.3.0, a mutation XSS affects users calling bleach.clean with math or svg; p or br; and style, title, noscript, script, textarea, noframes, iframe, or xmp tags with strip_comments=False.
3.3.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-29T19:54:34.048844+00:00 GitLab Importer Affected by VCID-mqaz-y2xw-sya2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/bleach/GMS-2021-168.yml 38.5.0
2026-04-29T19:39:29.786357+00:00 GitLab Importer Affected by VCID-kxh2-721e-tyh2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/bleach/GMS-2020-698.yml 38.5.0
2026-04-16T21:16:46.427382+00:00 GitLab Importer Affected by VCID-mqaz-y2xw-sya2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/bleach/GMS-2021-168.yml 38.4.0
2026-04-16T21:02:10.351095+00:00 GitLab Importer Affected by VCID-kxh2-721e-tyh2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/bleach/GMS-2020-698.yml 38.4.0
2026-04-11T22:28:56.474231+00:00 GitLab Importer Affected by VCID-mqaz-y2xw-sya2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/bleach/GMS-2021-168.yml 38.3.0
2026-04-11T22:13:30.101353+00:00 GitLab Importer Affected by VCID-kxh2-721e-tyh2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/bleach/GMS-2020-698.yml 38.3.0
2026-04-02T22:40:31.643162+00:00 GitLab Importer Affected by VCID-mqaz-y2xw-sya2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/bleach/GMS-2021-168.yml 38.1.0
2026-04-02T22:25:51.006193+00:00 GitLab Importer Affected by VCID-kxh2-721e-tyh2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/bleach/GMS-2020-698.yml 38.1.0
2026-04-01T15:03:24.779988+00:00 PyPI Importer Affected by VCID-mqaz-y2xw-sya2 https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.0.0
2026-04-01T15:01:49.444348+00:00 PyPI Importer Affected by VCID-kxh2-721e-tyh2 https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.0.0
2026-04-01T12:43:17.814591+00:00 Pypa Importer Affected by VCID-mqaz-y2xw-sya2 https://github.com/pypa/advisory-database/blob/main/vulns/bleach/PYSEC-2021-865.yaml 38.0.0
2026-04-01T12:42:24.443126+00:00 Pypa Importer Affected by VCID-kxh2-721e-tyh2 https://github.com/pypa/advisory-database/blob/main/vulns/bleach/PYSEC-2020-340.yaml 38.0.0