CVE-2020-6802

In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option...

Cross site scripting

In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA and either svg or math tags are whitelisted and the keyword argument strip=False...

CVE-2020-6816

In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA and either svg or math tags are whitelisted and the keyword argument strip=False...

django-crispy-contact-form (>=0.3.6, <=0.3.8), multidocs (0.1.1) +9 more potentially affected by CVE-2020-6816 via bleach (2.1.4)

bleach PYPI version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - django-crispy-contact-form =0.3.6, =2.2.0, =2.0.0, =0.5.0a2.post1, =0.4.0a5, =0.5.0 Source cves: CVE-2020-6816 Source advisory: OSV:PYSEC-2020-28...

hugo-jupyter (>=0.2.1, <=0.3.0) potentially affected by CVE-2020-6816 via bleach (2.0.0)

bleach PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - hugo-jupyter =0.2.1, =0.3.0 Source cves: CVE-2020-6816 Source advisory: OSV:PYSEC-2020-28...

cateye (0.3.8), protean (>=0.0.3, <=0.0.5) +5 more potentially affected by CVE-2020-6816 via bleach (2.1.3)

bleach PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - cateye 0.3.8 - protean =0.0.3, =0.4.2, =0.0.1, =0.1.0, =0.2.4 Source cves: CVE-2020-6816 Source advisory: OSV:PYSEC-2020-28...

PYSEC-2020-28

In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA and either svg or math tags are whitelisted and the keyword argument strip=False...

alo7-airflow (>=1.10.0, <=1.10.0.7), cateye (>=0.3.4, <=0.3.6) potentially affected by CVE-2020-6816 via bleach (2.1.2)

bleach PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - alo7-airflow =1.10.0, =0.3.4, =0.3.6 Source cves: CVE-2020-6816 Source advisory: OSV:PYSEC-2020-28...

asc (>=0.1.0, <=0.3.1), cloudml-hackathon-tensorboard (>=0.1.3, <=1.0.0) +19 more potentially affected by CVE-2020-6816 via bleach (1.5.0)

bleach PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - asc =0.1.0, =0.1.3, =0.2.1, =0.0.1, =0.1.0, =1.1.0, =4.0.2, =0.6.12a2, =0.1.1.1, =0.0.0.dev1, =2.1.0b3, =2.0.1, =0.4.0a0, =1.6.0rc0, =1.8.0 and more...

adversarial-labeller (0.1.8), autodiffing (>=0.0.6, <=0.0.7) +74 more potentially affected by CVE-2020-6816 via bleach (>=3.0.1, <=3.1.1)

bleach PYPI version =3.0.1, =0.0.6, =0.3.0, =0.0.9, =0.0.5, =0.1.0rc1, =0.0.1, =1.0.2, =0.1.2, =1.0.1.0, =1.0.2.0, =1.0.1.0, =1.0.0, =1.0.13 and more Source cves: CVE-2020-6816 Source advisory: OSV:PYSEC-2020-28...

tinyblog (>=0.3.0, <=0.5.2) potentially affected by CVE-2020-6816 via bleach (1.2.2)

bleach PYPI version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - tinyblog =0.3.0, =0.5.2 Source cves: CVE-2020-6816 Source advisory: OSV:PYSEC-2020-28...

CVE-2020-6816

In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA and either svg or math tags are whitelisted and the keyword argument strip=False...

Design/Logic Flaw

In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option...

PYSEC-2020-27

In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option...

UBUNTU-CVE-2020-6802

In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option...

CVE-2020-6802

In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option...

protobuf-compiler (1.0.20) potentially affected by CVE-2020-6816 via bleach (2.1.0)

bleach PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - protobuf-compiler 1.0.20 Source cves: CVE-2020-6816 Source advisory: OSV:PYSEC-2020-28...

PYSEC-2020-28

In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA and either svg or math tags are whitelisted and the keyword argument strip=False...

CVE-2020-6802

In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option...

UBUNTU-CVE-2020-6816

In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA and either svg or math tags are whitelisted and the keyword argument strip=False...