Skip to content
OpenAdvisories

Vendor

fedora-python

4 known vulnerabilities.

Products

lxml_html_clean 4
All Critical High Medium Low Exploited only

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-28350

    lxml_html_clean: <base> tag injection through default Cleaner configuration

    lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`. Prior to version 0.4.4, the <base> tag passes through the default Cleaner configuration. While page_structure=True removes html, head, and title tags, there is no sp…

    fedora-python lxml_html_clean lxml lxml-html-clean Debian Ubuntu PyPI
  • Medium 6.1
    CVE-2026-28348

    lxml_html_clean: CSS @import Filter Bypass via Unicode Escapes

    lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`. Prior to version 0.4.4, the _has_sneaky_javascript() method strips backslashes before checking for dangerous CSS keywords. This causes CSS Unicode escape sequences t…

    fedora-python lxml_html_clean lxml lxml-html-clean Debian Ubuntu PyPI