Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 10 | lxml | 4.3.2-1+deb10u1 |
Vulnerabilities 1
-
Medium 6.1
lxml vulnerable to Cross-site Scripting
A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML…