101 matches found
SUSE SLED15 / SLES15 Security Update : python-lxml (SUSE-SU-2022:0803-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0803-1 advisory. - An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remo...
OPENSUSE-SU-2022:0803-1 Security update for python-lxml
This update for python-lxml fixes the following issues: - CVE-2018-19787: Fixed XSS vulnerability via unescaped URL bsc1118088. - CVE-2021-28957: Fixed XSS vulnerability ia HTML5 attributes unescaped bsc1184177. - CVE-2021-43818: Fixed XSS vulnerability via script content in SVG images using data...
Mageia: Security Advisory (MGASA-2021-0595)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for python-lxml (FEDORA-2022-7129fbaeed)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Debian DSA-5043-1 : lxml - security update
The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5043 advisory. - lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass...
[SECURITY] [DSA 5043-1] lxml security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5043-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 12, 2022 https://www.debian.org/security/faq -...
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : lxml vulnerability (USN-5225-1)
The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5225-1 advisory. It was discovered that lxml incorrectly handled certain XML and HTML files. An attacker could possibly use this issue to execute arbitrary...
CVE-2021-43818 affecting package python-lxml 4.6.3-1
CVE-2021-43818 affecting package python-lxml 4.6.3-1. An upgraded version of the package is available that resolves this issue...
OESA-2022-1482 python-lxml security update
XML processing library combining libxml2/libxslt with the ElementTree API. Security Fixes: lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG...
Debian: Security Advisory (DLA-2871-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2021-0595 Updated python-lxml packages fix security vulnerability
HTML Cleaner allows crafted and SVG embedded scripts to pass through CVE-2021-43818...
Updated python-lxml packages fix security vulnerability
HTML Cleaner allows crafted and SVG embedded scripts to pass through CVE-2021-43818...
Debian DLA-2871-1 : lxml - LTS security update
The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2871 advisory. - lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass...
Fedora: Security Advisory for mingw-python-lxml (FEDORA-2021-9f9e7c5c4f)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2021-43818
creationtimestamp| type| source ---|---|--- 2021-12-13 20:11:14+00:00| seen| https://t.me/cibsecurity/33871 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/...
a3m (=0.1.0), acdh-collatex-utils (>=0.2.0 <=1.3.0) +701 more potentially affected by CVE-2021-43818 via lxml (>=3.2.3 <=4.6.4)
lxml PYPI version =3.2.3, =0.2.0, =1.0.0, =3.0.0, =0.1.0, =1.0.3, =1.0.0a1.post0, =1.10.0, =0.0.4, =0.0.14 and more Source cves: CVE-2021-43818 Source advisory: OSV:PYSEC-2021-852...
a3m (=0.1.0), acdh-collatex-utils (>=0.2.0 <=1.3.0) +701 more potentially affected by CVE-2021-43818 via lxml (>=3.2.3 <=4.6.4)
lxml PYPI version =3.2.3, =0.2.0, =1.0.0, =3.0.0, =0.1.0, =1.0.3, =1.0.0a1.post0, =1.10.0, =0.0.4, =0.0.14 and more Source cves: CVE-2021-43818 Source advisory: OSV:GHSA-55X5-FJ6C-H6M8...
CVE-2021-43818 HTML Cleaner allows crafted and SVG embedded scripts to pass through
lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant...
CVE-2021-43818
lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant...
CVE-2021-43818
CVE-2021-43818 affects python-lxml’s HTML Cleaner (lxml.html). Before 4.6.5, the HTML cleaner lets crafted script content pass through, including scripts in SVG data URLs, enabling potential XSS in security-relevant contexts. A fix is available in lxml 4.6.5; upgrade to receive the patch. The con...