PyPI/bleach: unknown 0

Bleach: URI sanitization allows disallowed URI schemes with Unicode > U+00A0 in output

Action: Upgrade bleach to 6.4.0 or later.

pip install bleach==6.4.0

Affected

Fixed versions

Sources

• osv: GHSA-8rfp-98v4-mmr6
• https://github.com/mozilla/bleach/security/advisories/GHSA-8rfp-98v4-mmr6
• https://bugzilla.mozilla.org/show_bug.cgi?id=2023812
• https://github.com/mozilla/bleach

published 2026-06-16T14:06:29Z · modified 2026-09-10T03:50:49.026722271Z · JSON