Vulnerabilities

TI-2026-36731 CVE-2026-49825 · GHSA-4jhm-jv67-739f

lxml: javascript: URL bypass in Cleaner via xlink:href

HIGH 69

lxml is a library for processing XML and HTML in the Python language.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00297 Published 2026-08-20 Partial fix · 6.1.1, 0.4.5 CWE-184

TI-2026-22630 CVE-2026-28350 · GHSA-xvp8-3mhv-424c

MEDIUM 60

lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00296 Published 2026-03-05 Fixed in 0.4.4 CWE-116

TI-2026-22629 CVE-2026-28348 · GHSA-hw26-mmpg-fqfg

MEDIUM 60

lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00282 Published 2026-03-05 Fixed in 0.4.4 CWE-116

TI-2024-35255 CVE-2024-52595 · GHSA-5jfw-gq64-q45f

LOW 34

lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`.

CVSS 3.1HIGH 7.7 Network No auth No interaction EPSS 0.00508 Published 2024-11-19 Fixed in 0.4.0 CWE-184