lxml-html-clean
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| lxml-html-clean has <base> tag injection through default Cleaner configuration | lxml-html-clean | PyPI | Medium | Fix reported | |
| lxml-html-clean has CSS @import Filter Bypass via Unicode Escapes | lxml-html-clean | PyPI | Medium | Fix reported | |
| `lxml_html_clean.Cleaner` does not strip `javascript:` URLs from namespaced URL attributes | lxml-html-cleanLightspeed Core/lightspeed-core/lightspeed-stack-rhel9 | PyPIRed Hat | High | Fix reported | |
| HTML Cleaner allows crafted scripts in special contexts like svg or math to pass through | lxml-html-clean | PyPI | High | Fix reported |