Lucene search
GoogleOSV:PYSEC-2021-849HistoryOct 18, 2021 - 3:15 p.m.
PYSEC-2021-849
2021-10-1815:15:00
Google
osv.dev
5
0.003 Low
EPSS
Percentile
71.7%
The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python (in pybluemonday), does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pybluemonday | eq | 0.0.3 | |
| pybluemonday | eq | 0.0.1 | |
| pybluemonday | eq | 0.0.5 | |
| pybluemonday | eq | 0.0.4 | |
| pybluemonday | eq | 0.0.2 | |
| pybluemonday | eq | 0.0.6 | |
| pybluemonday | eq | 0.0.7 |
Related
cve
cve
CVE-2021-42576
2021-10-18 15:15:07
nvd
nvd
CVE-2021-42576
2021-10-18 15:15:07
ubuntucve
ubuntucve
CVE-2021-42576
2021-10-18 00:00:00
veracode
veracode
Cross-site Scripting (XSS)
2021-10-19 04:35:53
debiancve
debiancve
CVE-2021-42576
2021-10-18 15:15:07
osv
osv
CVE-2021-42576
2021-10-18 15:15:07
Policies not properly enforced in bluemonday
2021-10-19 20:15:30
cvelist
cvelist
CVE-2021-42576
2021-10-18 14:36:43
github
github
Policies not properly enforced in bluemonday
2021-10-19 20:15:30
prion
prion
Design/Logic Flaw
2021-10-18 15:15:00