Skip to content
OpenAdvisories
High DLA-2167-1 1 CVE

python-bleach - security update

Published Apr 1, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 python-bleach 1.4-1+deb8u1

Vulnerabilities 1

  • High 7.5
    CVE-2020-6817

    regular expression denial-of-service (ReDoS) in Bleach

    bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to bleach.clean with an allowed tag with an allowed style attribute are vulnerable to ReDoS. For example, bleach.clean(..., attributes={'a': […

    Mozilla Mozilla Bleach bleach python-bleach Debian Ubuntu PyPI