TI-2026-29705 CVE-2026-41066 · GHSA-vfmq-68hx-4jfw
lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files
Priority LOW 39
lxml is a library for processing XML and HTML in the Python language.
Vulnerabilities
7 records
TI-2022-02132 CVE-2022-2309 · GHSA-wrxv-2j5q-m38w
NULL Pointer Dereference in lxml/lxml
Priority LOW 38
NULL Pointer Dereference allows attackers to cause a denial of service (or application crash).
TI-2021-19624 CVE-2021-43818 · GHSA-55x5-fj6c-h6m8
HTML Cleaner allows crafted and SVG embedded scripts to pass through
Priority MEDIUM 41
lxml is a library for processing XML and HTML in the Python language.
TI-2021-09882 CVE-2021-28957 · GHSA-jq4v-f5q6-mjqq
An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3.
Priority LOW 34
An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3.
TI-2020-16868 CVE-2020-27783 · GHSA-pgww-xf46-h92r
Cross-site scripting in python-lxml
Priority LOW 34
A XSS vulnerability was discovered in python-lxml's clean module.
TI-2018-14010 CVE-2018-19787 · GHSA-xp26-p53h-6h2p
An issue was discovered in lxml before 4.2.5.
Priority LOW 32
An issue was discovered in lxml before 4.2.5.
TI-2014-02511 CVE-2014-3146 · GHSA-57qw-cc2g-pv5p
Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5…
Priority LOW 36
Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via control characters in the link scheme to the clean_html func…