Linux Distros Unpatched Vulnerability : CVE-2021-42576

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python in pybluemonday, does not properly enforce policies associated with the SELECT, STYLE...

DEBIAN-CVE-2021-42576

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python in pybluemonday, does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

UBUNTU-CVE-2021-42576

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python in pybluemonday, does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

CVE-2021-42576

CVE-2021-42576 affects the bluemonday HTML sanitizer. The issue is that policies for the STYLE, SELECT and OPTION elements are not properly enforced in bluemonday before versions 1.0.16 (Go) and 0.0.8 (Python/pybluemonday). Root cause: policy enforcement gaps allow disallowed styling to leak into...