996 matches found
CVE-2026-11112-XXE-via-SVG-Image-Upload
CVE-2026-11112 – XXE via SVG Image Upload Program Code Python Flask + XML parser xxeuploadserver.py - Uploads SVG, renders with lxml resolving entities from flask import Flask, request from lxml import etree app = Flaskname @app.route'/upload', methods='POST' def uploadsvg: svgdata = request.data...
CVE-2026-22006-XSLT-Server-Side-Injection-via-xsl-script-
CVE-2026-22006 – XSLT Server‑Side Injection via xsl:script Program Code Python + XSLT xsltserver.py - Applies user-supplied XSLT to XML from lxml import etree from flask import Flask, request app = Flaskname @app.route'/transform', methods='POST' def transform: xml = request.form'xml' xslt =...
CLEANSTART-2026-MU53831 XSS vulnerability was discovered in python-lxml's clean module versions before 4
CVE-2021-28957 affects multiple packages. An XSS vulnerability was discovered in python-lxml's clean module versions before 4. See references for individual vulnerability details...
CLEANSTART-2026-SA27985 XSS vulnerability was discovered in python-lxml's clean module
CVE-2020-27783 affects multiple packages. A XSS vulnerability was discovered in python-lxml's clean module. See references for individual vulnerability details...
CLEANSTART-2026-DI40972 lxml is a library for processing XML and HTML in the Python language
CVE-2021-43818 affects multiple packages. lxml is a library for processing XML and HTML in the Python language. See references for individual vulnerability details...
RHEL 6 : python-lxml (RHSA-2026:90336)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:90336 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...
Important: Red Hat Security Advisory: python-lxml security update
An update for python-lxml is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...
lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href
A flaw was found in lxml, a library for processing XML and HTML in Python. The lxml.html.defs.linkattrs were missing xlink:href, which could allow an attacker to bypass URL filtering mechanisms. This vulnerability enables URL bypass attacks in embedded content such as Scalable Vector Graphics SVG...
lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href
A flaw was found in lxml, a library for processing XML and HTML in Python. The lxml.html.defs.linkattrs were missing xlink:href, which could allow an attacker to bypass URL filtering mechanisms. This vulnerability enables URL bypass attacks in embedded content such as Scalable Vector Graphics SVG...
Important: Red Hat Security Advisory: python-lxml security update
An update for python-lxml is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...
Important: Red Hat Security Advisory: python-lxml security update
An update for python-lxml is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...
lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href
A flaw was found in lxml, a library for processing XML and HTML in Python. The lxml.html.defs.linkattrs were missing xlink:href, which could allow an attacker to bypass URL filtering mechanisms. This vulnerability enables URL bypass attacks in embedded content such as Scalable Vector Graphics SVG...
RHEL 7 : python-lxml (RHSA-2026:90327)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:90327 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...
Fedora 44 : mingw-python-lxml (2026-99cd0bee1c)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-99cd0bee1c advisory. Update to python-lxml-6.1.1. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not teste...
CentOS Linux 7 [TuxCare] Security Update: python-lxml / python-lxml-docs (CENTOS7:CLSA-2026:1792861994)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1792861994 advisory. - lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in lxml.html.defs.linkattrs were missing...
RHEL 8 : python-lxml (RHSA-2026:90326)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:90326 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...
CLSA-2026-1792809858 python-lxml: Fix of CVE-2026-49825
CVE-2026-49825: add missing xlink:href to HTML link attributes so the Cleaner sanitizes it...
CLSA-2026-1792809744 python-lxml: Fix of CVE-2026-49825
CVE-2026-49825: add missing xlink:href to HTML link attributes so the Cleaner sanitizes it...
Alibaba Cloud Linux 3 : 0309: python-lxml (ALINUX3-SA-2026:0309)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0309 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-49825: lxml is a library for processing XM...