Medium DSA-4636-1 1 CVE

python-bleach - security update

Published Feb 28, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	python-bleach	3.1.1-0+deb10u1

Vulnerabilities 1

Medium 6.1

CVE-2020-6802

XSS in Bleach when noscript and raw tag whitelisted

In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option.

bleach python-bleach python-bleach py3-bleach Debian Ubuntu Alpine PyPI

Mar 24, 2020