Debian/python-bleach: critical 9.8
An issue was discovered in Bleach 2.1.x before 2.1.3. Attributes that have URI values weren't properly sanitized if the values contained character entities. Using character entities, it was possible t
Action: Upgrade python-bleach to 2.1.3-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.3-1 | - |
Fixed versions
| 2.1.3-1 |
Sources
- osv: DEBIAN-CVE-2018-7753#Debian:14/python-bleach
- https://security-tracker.debian.org/tracker/CVE-2018-7753
published · modified · JSON