Vulnerabilities

TI-2026-22630 CVE-2026-28350 · GHSA-xvp8-3mhv-424c

lxml_html_clean: <base> tag injection through default Cleaner configuration

MEDIUM 60

lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00296 Published 2026-03-05 Fixed in 0.4.4 CWE-116

TI-2026-22629 CVE-2026-28348 · GHSA-hw26-mmpg-fqfg

MEDIUM 60

lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00282 Published 2026-03-05 Fixed in 0.4.4 CWE-116

TI-2024-35255 CVE-2024-52595 · GHSA-5jfw-gq64-q45f

LOW 34

lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`.

CVSS 3.1HIGH 7.7 Network No auth No interaction EPSS 0.00508 Published 2024-11-19 Fixed in 0.4.0 CWE-184