Skip to content
OpenAdvisories

Product · Mozilla

Mozilla Bleach

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2021-23980

    Cross-site scripting in Bleach

    A mutation XSS affects users calling bleach.clean with all of: svg or math in the allowed tags p or br in allowed tags style, title, noscript, script, textarea, noframes, iframe, or xmp in allowed tags the keyword argument strip_comments=False Note: none of t…

    Mozilla Mozilla Bleach bleach python-bleach Debian Ubuntu Alpine PyPI