PyPI/bleach: medium 6.1

Bleach clean() / Cleaner() fails to sanitize dangerous URI schemes in allowed formaction attributes

Action: Upgrade bleach to 6.4.0 or later.

pip install bleach==6.4.0

Affected

Fixed versions

Sources

• osv: GHSA-gj48-438w-jh9v
• https://github.com/mozilla/bleach/security/advisories/GHSA-gj48-438w-jh9v
• https://github.com/mozilla/bleach
• https://github.com/mozilla/bleach/releases/tag/v6.4.0

published 2026-06-16T14:07:49Z · modified 2026-09-10T03:50:49.646625202Z · JSON