Search for packages
| purl | pkg:deb/debian/lxml@2.3.2-1%2Bdeb7u1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-44yg-s35j-93gc
Aliases: CVE-2014-3146 GHSA-57qw-cc2g-pv5p PYSEC-2014-9 |
Affected by 5 other vulnerabilities. |
|
|
VCID-54y7-7cf3-k3hz
Aliases: DSA-4810-2 lxml |
regression update |
Affected by 3 other vulnerabilities. |
|
VCID-63wu-4us2-ckew
Aliases: CVE-2021-43818 GHSA-55x5-fj6c-h6m8 PYSEC-2021-852 |
cross-site scripting |
Affected by 3 other vulnerabilities. Affected by 1 other vulnerability. |
|
VCID-66uv-czd7-vudr
Aliases: CVE-2018-19787 GHSA-xp26-p53h-6h2p PYSEC-2018-12 |
An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by "j a v a s c r i p t:" in Internet Explorer. This is a similar issue to CVE-2014-3146. |
Affected by 3 other vulnerabilities. |
|
VCID-eebj-dxtn-u3ep
Aliases: CVE-2020-27783 GHSA-pgww-xf46-h92r PYSEC-2020-62 |
cross-site scripting |
Affected by 3 other vulnerabilities. Affected by 1 other vulnerability. |
|
VCID-wjdb-errb-17b6
Aliases: CVE-2021-28957 GHSA-jq4v-f5q6-mjqq PYSEC-2021-19 |
insufficient validation |
Affected by 3 other vulnerabilities. Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-44yg-s35j-93gc |
CVE-2014-3146
GHSA-57qw-cc2g-pv5p PYSEC-2014-9 |