{"action":"Upgrade bleach to 2.1.3 or later.","affected":[{"fixed":"2.1.3","introduced":"2.1.0"}],"component":"bleach","cve_ids":["CVE-2018-7753"],"ecosystem":"PyPI","epss":0.02172,"exploited":false,"fixed_versions":["2.1.3"],"ghsa_id":"GHSA-m9mq-p2f9-cfqv","id":"tcs_01M5KFQT33AE9RGNY8R5M7ANC1","modified_at":"2025-02-16T05:29:49.530342Z","published_at":"2019-01-04T17:46:30Z","references":["https://osv.dev/vulnerability/GHSA-m9mq-p2f9-cfqv","https://nvd.nist.gov/vuln/detail/CVE-2018-7753","https://github.com/mozilla/bleach/commit/c5df5789ec3471a31311f42c2d19fc2cf21b35ef","https://bugs.debian.org/892252","https://github.com/mozilla/bleach","https://github.com/mozilla/bleach/releases/tag/v2.1.3","https://github.com/pypa/advisory-database/tree/main/vulns/bleach/PYSEC-2018-51.yaml"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-m9mq-p2f9-cfqv","url":"https://osv.dev/vulnerability/GHSA-m9mq-p2f9-cfqv"}],"summary":"Bleach URI Scheme Restriction Bypass"}