1265 matches found
alo7-airflow (>=1.10.0, <=1.10.0.7), c2cwsgiutils (>=0.14.0, <=0.27.0) +44 more potentially affected by CVE-2020-27783 via lxml (3.8.0)
lxml PYPI version 3.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - alo7-airflow =1.10.0, =0.14.0, =0.0.1, =0.2.2, =1.0.0, =3.0.4, =0.0.0a3, =0.8.4, =0.1.4, =0.0.13, =0.0.0, =0.0.2, =1.0.0a2, =1.0.0a8 and more Source cve...
elifearticle (0.1.1), elifedbtools (0.0.1) +1 more potentially affected by CVE-2020-27783 via lxml (3.4.1)
lxml PYPI version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - elifearticle 0.1.1 - elifedbtools 0.0.1 - elifetools =0.1.2, =0.1.7 Source cves: CVE-2020-27783 Source advisory: OSV:GHSA-PGWW-XF46-H92R...
EulerOS 2.0 SP9 : python-lxml (EulerOS-SA-2021-1016)
According to the version of the python-lxml package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different...
EulerOS 2.0 SP9 : python-lxml (EulerOS-SA-2021-1035)
According to the version of the python-lxml package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different...
[SECURITY] [DSA 4810-2] lxml regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-4810-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 19, 2020 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4810-2] lxml regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-4810-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 19, 2020 https://www.debian.org/security/faq -...
DSA-4810-2 lxml - regression update
Bulletin has no description...
[SECURITY] [DLA 2467-2] lxml regression update
Debian LTS Advisory DLA-2467-2 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez December 18, 2020 https://wiki.debian.org/LTS Package : lxml Version : 3.7.1-1+deb9u3 CVE ID : CVE-2020-27783 The fix for CVE-2020-27783, released as DLA 2467-1, was incomplete as th...
DLA-2467-2 lxml - regression update
Bulletin has no description...
Huawei EulerOS: Security Advisory for python-lxml (EulerOS-SA-2020-2529)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-4810-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-4810-1 : lxml - security update
Yaniv Nizry discovered that the clean module of lxml, Python bindings for libxml2 and libxslt could be bypassed. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4810. The text itself is copyright C Software i...
EulerOS 2.0 SP8 : python-lxml (EulerOS-SA-2020-2529)
According to the version of the python-lxml packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use...
[SECURITY] [DSA 4810-1] lxml security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4810-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 13, 2020 https://www.debian.org/security/faq -...
DSA-4810-1 lxml - security update
Bulletin has no description...
USN-4666-2: lxml vulnerability
USN-4666-1 partially fixed a vulnerability in lxml, but an additional patch was needed. This update provides the corresponding additional patch in order to properly fix the vulnerability. Original advisory details: It was discovered that lxml incorrectly handled certain HTML. An attacker could...
USN-4666-2 lxml vulnerability
USN-4666-1 partially fixed a vulnerability in lxml, but an additional patch was needed. This update provides the corresponding additional patch in order to properly fix the vulnerability. Original advisory details: It was discovered that lxml incorrectly handled certain HTML. An attacker could...
Ubuntu: Security Advisory (USN-4666-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : lxml vulnerability (USN-4666-2)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4666-2 advisory. USN-4666-1 partially fixed a vulnerability in lxml, but an additional patch was needed. This update provides the corresponding additional...
Ubuntu: Security Advisory (USN-4666-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...