Red Hat Update Infrastructure 4 for Cloud Providers/python-lxml
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files | lxmlMigration Toolkit for Applications 8/mta/mta-solution-server-rhel9 | PyPIRed Hat | High | Fix reported | |
| `lxml_html_clean.Cleaner` does not strip `javascript:` URLs from namespaced URL attributes | lxml-html-cleanLightspeed Core/lightspeed-core/lightspeed-stack-rhel9 | PyPIRed Hat | High | Fix reported |