Alpine/py3-bleach: medium 6.1
A mutation XSS affects users calling bleach.clean with all of: svg or math in the allowed tags p or br in allowed tags style, title, noscript, script, textarea, noframes, iframe, or xmp in allowed tag
Action: Upgrade py3-bleach to 3.3.0-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.3.0-r0 | - |
Fixed versions
| 3.3.0-r0 |
Sources
- osv: ALPINE-CVE-2021-23980#Alpine:v3.17/py3-bleach
- https://security.alpinelinux.org/vuln/CVE-2021-23980
published · modified · JSON