The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python (in pybluemonday), does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.
CPE | Name | Operator | Version |
---|---|---|---|
bluemonday | eq | 1.0.15 | |
bluemonday | eq | 1.0.12 | |
bluemonday | eq | 1.0.3 | |
bluemonday | eq | 1.0.5 | |
bluemonday | eq | 1.0.6 | |
bluemonday | eq | 1.0.7 | |
bluemonday | eq | 1.0.9 | |
bluemonday | eq | 1.0.11 | |
bluemonday | eq | 1.0.10 | |
bluemonday | eq | 1.0.2 |