Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

USN-8077-1: Bleach vulnerabilities

🗓️ 05 Mar 2026 16:04:13Reported by UbuntuType 
ubuntu
 ubuntu🔗 ubuntu.com👁 6 Views

Bleach sanitization flaws causing cross-site scripting and denial of service, affecting Ubuntu eighteen point four.

Related
Packages
ReporterTitlePublishedViews
Family
FreeBSD		py-bleach -- regular expression denial-of-service
9 Mar 201900:00
–freebsd
IBM Security Bulletins		Security Bulletin: A security vulnerability has been identified in Bleach shipped with IBM Watson Machine Learning Community Edition (WMLCE)
19 May 202017:00
–ibm
AlpineLinux		CVE-2020-6802
24 Mar 202021:13
–alpinelinux
AlpineLinux		CVE-2020-6816
24 Mar 202021:15
–alpinelinux
AlpineLinux		CVE-2021-23980
16 Feb 202300:00
–alpinelinux
AstraLinux		 Astra Linux - уязвимость в python-bleach
20 May 202605:53
–astralinux
BDU FSTEC		The vulnerability of the library for cleaning HTML-based text using python-bleach allows a attacker to compromise data integrity.
7 May 202000:00
–bdu_fstec
BDU FSTEC		The vulnerability of the bleach-based HTML cleaning library, which exists due to the lack of measures taken to protect the structure of web pages, allows attackers to compromise the confidentiality and integrity of the protected information.
23 Jun 202100:00
–bdu_fstec
BDU FSTEC		The vulnerability of Mozilla’s HTML cleaning library, Bleach, arises due to the lack of measures taken to protect the structure of web pages. This allows attackers to execute XSS attacks.
30 Nov 202200:00
–bdu_fstec
Circl		CVE-2020-6817
11 Mar 202322:20
–circl
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Ubuntu16.04anypython-bleach1.4.2-1ubuntu0.1~esm1python-bleach_1.4.2-1ubuntu0.1~esm1_any.deb
Ubuntu18.04anypython-bleach2.1.2-1ubuntu0.1~esm1python-bleach_2.1.2-1ubuntu0.1~esm1_any.deb
Ubuntu16.04anypython-bleach-doc1.4.2-1ubuntu0.1~esm1python-bleach-doc_1.4.2-1ubuntu0.1~esm1_any.deb
Ubuntu18.04anypython-bleach-doc2.1.2-1ubuntu0.1~esm1python-bleach-doc_2.1.2-1ubuntu0.1~esm1_any.deb
Ubuntu20.04anypython-bleach-doc3.1.1-1ubuntu0.1~esm1python-bleach-doc_3.1.1-1ubuntu0.1~esm1_any.deb
Ubuntu16.04anypython3-bleach1.4.2-1ubuntu0.1~esm1python3-bleach_1.4.2-1ubuntu0.1~esm1_any.deb
Ubuntu18.04anypython3-bleach2.1.2-1ubuntu0.1~esm1python3-bleach_2.1.2-1ubuntu0.1~esm1_any.deb
Ubuntu20.04anypython3-bleach3.1.1-1ubuntu0.1~esm1python3-bleach_3.1.1-1ubuntu0.1~esm1_any.deb

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
05 Mar 2026 16:04Current
5.5Medium risk
Vulners AI Score5.5
CVSS 27.5
CVSS 39.8
CVSS 3.17.5
EPSS0.02229
SSVC
bleach sanitization flawscross site scriptinguri attribute issuenoscript tagrcdata tagsvg math tagsstyle attribute parsingmutation xssdenial of serviceubuntu eighteen point four
6