Debian/golang-github-microcosm-cc-bluemonday: critical 9.8
The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python (in pybluemonday), does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.
Action: Upgrade golang-github-microcosm-cc-bluemonday to 1.0.16-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.16-1 | - |
Fixed versions
| 1.0.16-1 |
Sources
published · modified · JSON