tocsin

PyPI/lxml CVE-2020-27783: unknown, EPSS 3.98%

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A re

Action: Upgrade lxml to 4.6.2 or later.

pip install lxml==4.6.2

Affected

introducedfixedlast affected
1.24.6.2-

Fixed versions

4.6.2

Sources

CVE-2020-27783 · published · modified · JSON