CVE-2024-52595

creationtimestamp| type| source ---|---|--- 2024-11-20 00:21:54+00:00| seen| https://t.me/cvedetector/11533 2024-11-28 11:01:07+00:00| seen| https://infosec.exchange/users/dragonjar/statuses/113560234590577110 2024-12-13 16:50:37+00:00| published-proof-of-concept|...

ailingo (>=0.2.0 <=0.4.0), async-scrape (>=0.1.19 <=0.1.20) +22 more potentially affected by CVE-2024-52595 via lxml-html-clean (>=0.1.0 <=0.3.1)

lxml-html-clean PYPI version =0.1.0, =0.2.0, =0.1.19, =0.3.1, =0.0.550, =0.1.0, =0.0.7, =0.6.0, =0.2.0, =12.0.15, =1.0.1, =0.1.0, =0.1.0, =1.10.0, =1.19.0 and more Source cves: CVE-2024-52595 Source advisory: OSV:PYSEC-2024-160...

CVE-2024-52595 HTML Cleaner allows crafted scripts in special contexts like svg or math to pass through

lxmlhtmlclean is a project for HTML cleaning functionalities copied from lxml.html.clean. Prior to version 0.4.0, the HTML Parser in lxml does not properly handle context-switching for special HTML tags such as , and . This behavior deviates from how web browsers parse and interpret such tags...

CVE-2024-52595

The CVE-2024-52595 issue affects lxml_html_clean (a cleaning module related to lxml.html.clean). Before version 0.4.0, the HTML Parser mishandles context-switching for tags such as , , and , causing CSS-comment content to be treated inconsistently and potentially enabling XSS in untrusted HTML sa...

ailingo (>=0.2.0 <=0.4.0), async-scrape (>=0.1.19 <=0.1.20) +22 more potentially affected by CVE-2024-52595 via lxml-html-clean (>=0.1.0 <=0.3.1)

lxml-html-clean PYPI version =0.1.0, =0.2.0, =0.1.19, =0.3.1, =0.0.550, =0.1.0, =0.0.7, =0.6.0, =0.2.0, =12.0.15, =1.0.1, =0.1.0, =0.1.0, =1.10.0, =1.19.0 and more Source cves: CVE-2024-52595 Source advisory: SNYK:PYTHON-LXMLHTMLCLEAN-8399905...

ailingo (>=0.2.0 <=0.4.0), async-scrape (>=0.1.19 <=0.1.20) +22 more potentially affected by CVE-2024-52595 via lxml-html-clean (>=0.1.0 <=0.3.1)

lxml-html-clean PYPI version =0.1.0, =0.2.0, =0.1.19, =0.3.1, =0.0.550, =0.1.0, =0.0.7, =0.6.0, =0.2.0, =12.0.15, =1.0.1, =0.1.0, =0.1.0, =1.10.0, =1.19.0 and more Source cves: CVE-2024-52595 Source advisory: OSV:GHSA-5JFW-GQ64-Q45F...