Skip to content
OpenAdvisories

Package · Ubuntu

lxml-html-clean

3 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.7

    HTML Cleaner allows crafted scripts in special contexts like svg or math to pass through

    lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`. Prior to version 0.4.0, the HTML Parser in lxml does not properly handle context-switching for special HTML tags such as `<svg>`, `<math>` and `<noscript>`. This beh…