Skip to content
OpenAdvisories

Package · Debian

lxml

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2014-3146 Public exploit

    lxml Cross-site Scripting Via Control Characters

    Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via control characters in the link scheme to the clean_html function.

    lxml lxml lxml Debian Ubuntu PyPI