Skip to content
OpenAdvisories

Package · Debian

html5lib

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2016-9909

    Improper Neutralization of Input During Web Page Generation in html5lib

    The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishandling of the < (less than) character in attribute values.

    html5lib html5lib html5lib Debian Ubuntu PyPI
  • Medium 6.1
    CVE-2016-9910

    Cross-site Scripting in html5lib

    The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishandling of special characters in attribute values, a different vulnerability than CVE-2016-9909.

    html5lib html5lib html5lib Debian Ubuntu PyPI