Debian/python-bleach: critical 9.8
An issue was discovered in Bleach 2.1.x before 2.1.3. Attributes that have URI values weren't properly sanitized if the values contained character entities. Using character entities, it was possible t
Action: Upgrade python-bleach to 2.1.3-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.3-1 | - |
Fixed versions
| 2.1.3-1 |
Sources
published · modified · JSON