Skip to content
OpenAdvisories

Product · fedora-python

lxml_html_clean

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.2
    CVE-2026-49825

    lxml: javascript: URL bypass in Cleaner via xlink:href

    lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in ``lxml.html.defs.link_attrs`` were missing ``xlink:href``, which can be used for URL bypass attacks in embedded SVG/MathML/etc. content. This vulnerabilit…

    lxml fedora-python lxml_html_clean lxml Debian Ubuntu PyPI
  • High 7.7
    CVE-2024-52595

    HTML Cleaner allows crafted scripts in special contexts like svg or math to pass through

    lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`. Prior to version 0.4.0, the HTML Parser in lxml does not properly handle context-switching for special HTML tags such as `<svg>`, `<math>` and `<noscript>`. This beh…

    fedora-python lxml_html_clean lxml-html-clean lxml-html-clean Debian Ubuntu PyPI