SUSE CVE-2018-7753

An issue was discovered in Bleach 2.1.x before 2.1.3. Attributes that have URI values weren't properly sanitized if the values contained character entities. Using character entities, it was possible to construct a URI value with a scheme that was not allowed that would slide through unsanitized...

CVE-2018-3650: Improper Input Validation

Insufficient Input Validation in Bleach module in INTEL Distribution for Python versions prior to IDP 2018 Update 2 allows unprivileged user to bypass URI sanitization via local vector...

PT-2018-16111

Name of the Vulnerable Software and Affected Versions INTEL Distribution for Python versions prior to 2018 Update 2 Description The issue is related to insufficient input validation in the Bleach module, allowing an unprivileged user to bypass URI sanitization. This can be achieved via a local...