Skip to content
OpenAdvisories

Package · Debian

python-html-sanitizer

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2024-34078

    html-sanitizer allows arbitrary HTML present after sanitization because of unicode normalization

    html-sanitizer is an allowlist-based HTML cleaner. If using `keep_typographic_whitespace=False` (which is the default), the sanitizer normalizes unicode to the NFKC form at the end. Some unicode characters normalize to chevrons; this allows specially crafted …

    matthiask html-sanitizer python-html-sanitizer html-sanitizer Debian Ubuntu PyPI