lxml

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

lxml records in CISA KEV

No lxml vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Lxml 7 records MEDIUM

Records

7 records in Lxml · all components

TI-2021-19624 CVE-2021-43818 · GHSA-55x5-fj6c-h6m8

HTML Cleaner allows crafted and SVG embedded scripts to pass through

MEDIUM 41

lxml is a library for processing XML and HTML in the Python language.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.02641 Published 2021-12-13 Partial fix · 4.6.5 CWE-74

TI-2026-29705 CVE-2026-41066 · GHSA-vfmq-68hx-4jfw

lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files

LOW 39

lxml is a library for processing XML and HTML in the Python language.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00324 Published 2026-04-24 Partial fix · 6.1.0 CWE-611

TI-2022-02132 CVE-2022-2309 · GHSA-wrxv-2j5q-m38w

NULL Pointer Dereference in lxml/lxml

LOW 38

NULL Pointer Dereference allows attackers to cause a denial of service (or application crash).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02448 Published 2022-07-05 Partial fix · 4.9.1 CWE-476

TI-2014-02511 CVE-2014-3146 · GHSA-57qw-cc2g-pv5p

Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5…

LOW 36

Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via control characters in the link scheme to the clean_html func…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.06333 Published 2014-05-14 Partial fix · 3.3.5 CWE-79

TI-2021-09882 CVE-2021-28957 · GHSA-jq4v-f5q6-mjqq

An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3.

LOW 34

An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.04035 Published 2021-03-21 Partial fix · 4.6.3 CWE-79

TI-2020-16868 CVE-2020-27783 · GHSA-pgww-xf46-h92r

Cross-site scripting in python-lxml

LOW 34

A XSS vulnerability was discovered in python-lxml's clean module.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03982 Published 2020-12-03 Partial fix · 4.6.2 CWE-79

TI-2018-14010 CVE-2018-19787 · GHSA-xp26-p53h-6h2p

An issue was discovered in lxml before 4.2.5.

LOW 32

An issue was discovered in lxml before 4.2.5.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02438 Published 2018-12-02 Partial fix · 4.2.5 CWE-79

Open these records in search →

Critical	0
High	4
Medium	4
Low	0
No CVSS	0