CVE-2026-28348
- EPSS 0.03%
- Veröffentlicht 05.03.2026 20:16:16
- Zuletzt bearbeitet 09.03.2026 20:55:16
lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`. Prior to version 0.4.4, the _has_sneaky_javascript() method strips backslashes before checking for dangerous CSS keywords. This causes CSS Unicode escape se...
CVE-2026-28350
- EPSS 0.01%
- Veröffentlicht 05.03.2026 20:16:16
- Zuletzt bearbeitet 09.03.2026 20:55:26
lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`. Prior to version 0.4.4, the <base> tag passes through the default Cleaner configuration. While page_structure=True removes html, head, and title tags, there...
CVE-2024-52595
- EPSS 0.5%
- Veröffentlicht 19.11.2024 22:15:21
- Zuletzt bearbeitet 25.11.2024 14:27:38
lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`. Prior to version 0.4.0, the HTML Parser in lxml does not properly handle context-switching for special HTML tags such as `<svg>`, `<math>` and `<noscript>`....