Medium DSA-4643-1 1 CVE

python-bleach - security update

Published Mar 20, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	python-bleach	3.1.2-0+deb10u1

Vulnerabilities 1

Medium 6.1

CVE-2020-6816

Bleach vulnerable to mutation XSS via whitelisted math or svg and raw tag

In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA and either svg or math tags are whitelisted and the keyword argument strip=False.

bleach python-bleach python-bleach py3-bleach Debian Ubuntu Alpine PyPI

Mar 24, 2020