Read the docs

lxml

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

lxml records in CISA KEV

No lxml vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Lxml 7 records MEDIUM

Records

8 records

TI-2022-02132 CVE-2022-2309 · GHSA-wrxv-2j5q-m38w

NULL Pointer Dereference in lxml/lxml

Priority LOW 38

NULL Pointer Dereference allows attackers to cause a denial of service (or application crash).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02448 Published 2022-07-05 Partial fix · 4.9.1 CWE-476
TI-2014-02511 CVE-2014-3146 · GHSA-57qw-cc2g-pv5p

Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5…

Priority LOW 36

Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via control characters in the link scheme to the clean_html func…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.06333 Published 2014-05-14 Partial fix · 3.3.5 CWE-79
TI-2020-16868 CVE-2020-27783 · GHSA-pgww-xf46-h92r

Cross-site scripting in python-lxml

Priority LOW 34

A XSS vulnerability was discovered in python-lxml's clean module.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03982 Published 2020-12-03 Partial fix · 4.6.2 CWE-79
Open these records in search →