SUSE CVE-2016-9909

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of the less than character in attribute values...

asc (>=0.1.0, <=0.3.1), bleach (1.5.0) +49 more potentially affected by CVE-2016-9909 via html5lib (>=0.95.0, <=0.9999999.0)

html5lib PYPI version =0.95.0, =0.1.0, =0.1.3, =0.2.1, =2.0.0b7, =3.0.14, =0.9.0, =2.5.0b1, =2.1.13, =0.0.1, =0.2.0, =0.36.0 - glamkit-sponsors 0.5.0 and more Source cves: CVE-2016-9909 Source advisory: OSV:GHSA-V9V9-XFFQ-RWR4...

asc (>=0.1.0, <=0.3.1), bleach (1.5.0) +49 more potentially affected by CVE-2016-9909 via html5lib (>=0.95.0, <=0.9999999.0)

html5lib PYPI version =0.95.0, =0.1.0, =0.1.3, =0.2.1, =2.0.0b7, =3.0.14, =0.9.0, =2.5.0b1, =2.1.13, =0.0.1, =0.2.0, =0.36.0 - glamkit-sponsors 0.5.0 and more Source cves: CVE-2016-9909 Source advisory: GHSA-V9V9-XFFQ-RWR4...

GHSA-8F6M-GFQ9-G33V Cross-site Scripting in html5lib

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of special characters in attribute values, a different vulnerability than CVE-2016-9909...

asc (>=0.1.0, <=0.3.1), bleach (1.5.0) +49 more potentially affected by CVE-2016-9909 via html5lib (>=0.95.0, <=0.9999999.0)

html5lib PYPI version =0.95.0, =0.1.0, =0.1.3, =0.2.1, =2.0.0b7, =3.0.14, =0.9.0, =2.5.0b1, =2.1.13, =0.0.1, =0.2.0, =0.36.0 - glamkit-sponsors 0.5.0 and more Source cves: CVE-2016-9909 Source advisory: OSV:PYSEC-2017-14...

asc (>=0.1.0, <=0.3.1), bleach (1.5.0) +49 more potentially affected by CVE-2016-9909 via html5lib (>=0.95.0, <=0.9999999.0)

html5lib PYPI version =0.95.0, =0.1.0, =0.1.3, =0.2.1, =2.0.0b7, =3.0.14, =0.9.0, =2.5.0b1, =2.1.13, =0.0.1, =0.2.0, =0.36.0 - glamkit-sponsors 0.5.0 and more Source cves: CVE-2016-9909 Source advisory: MEND:CVE-2016-9909...

CVE-2016-9909

CVE-2016-9909 affects the html5lib serializer prior to 0.99999999. The vulnerability arises from improper handling of the

CVE-2016-9909

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of the less than character in attribute values...

[ASA-201612-13] python-html5lib: cross-site scripting

Arch Linux Security Advisory ASA-201612-13 ========================================== Severity: Low Date : 2016-12-12 CVE-ID : CVE-2016-9909 CVE-2016-9910 Package : python-html5lib Type : cross-site scripting Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package...

[ASA-201612-12] python2-html5lib: cross-site scripting

Arch Linux Security Advisory ASA-201612-12 ========================================== Severity: Low Date : 2016-12-12 CVE-ID : CVE-2016-9909 CVE-2016-9910 Package : python2-html5lib Type : cross-site scripting Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The packag...