Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 9 | python-bleach | 2.0-1+deb9u1 |
Vulnerabilities 1
-
Medium 6.1
Cross-site scripting in Bleach
A mutation XSS affects users calling bleach.clean with all of: svg or math in the allowed tags p or br in allowed tags style, title, noscript, script, textarea, noframes, iframe, or xmp in allowed tags the keyword argument strip_comments=False Note: none of t…